A computer system having secured network services is presented. The
computer system comprises a processor, a memory, and a network action
processing module. The network action processing module processes network
actions from one or more network services executing on the computer
system. The computer system is further configured to execute at least
network service performing network actions in conjunction with the
network action processing module. Upon receiving a network action from a
network service, the network action processing module determines whether
the network action is a valid network action according to a network
action control list. If the network action is determined to not be a
valid network action, the network action is blocked. Alternatively, if
the network action is determined to be a valid network action, the
network action is permitted to be completed.