Currently I change one setting after each update of the kaltura backend:
The searchd is defined listening like this:
searchd
{
listen = 0.0.0.0:9312:mysql41
But I only need him listening to localhost, so I change that line and restart the service.
searchd
{
listen = 127.0.0.1:9312:mysql41
Your sure can hide that service using firewall settings, but why listening to any interface in the first place? At least I expect that installation on a stand alone server running all processes.