More information on these “helper” processes can be found in Gitlab: here

We need to restrict the traffic that is allowed to use the ports these processes use to receive data. To do this we need to set up iptables rules. However, iptables rules do not persist reboots so we need to install the iptables-services package (on CentOS) and run the following commands:

systemctl enable iptables
iptables-save > /etc/sysconfig/iptables