closing incoming connections

what's the best way to close all incoming connections to a laptop so that if there is already malware/ RAT on it, someone wouldn't be able to get onto my computer even though they had previously been able to due to RAT?

Thanks.