Does it just possible to use only firewalls or software restrictions on operating systems to do it? Can the service itself be disabled without the need for other software? (Example systemctl disable systemd-resolved). Even I delete the iputils package, able to respond to ping requests on the network. Why?