On all your Linux machines:

1. Enable firewall.

2. Install, run, and learn Opensnitch (it's easy).

3. Periodically run clamav, rkhunter, and chkrootkit.

Desktop operating systems by default trust the network too much; the above will help you verify, instead.