Block Socket ports in Kernel

Hello, I would like to add security to the networking of the embedded linux. I wanted to know what is the way to block all socket port numbers and allow only relevant ports for udp and tcp communication. I will also need to block certain capabilities from kernel (ftp, etc) to make it less vulnerable. Thank you very much, Ran