incoming ports

Hello, I am trying to prevent getting spied on over my LAN. I believe the only way for this to be done is for the sleuth to use remote login. I have very little knowledge on networking, and am assuming the solution has something to do with disabling incoming ports on Windows Firewall. Thank you...