SmallNetBuilder has some good articles: http://www.smallnetbuilder.com/security/security-howto For example, consider installing pfsense firewall in front of your DMZ. Also, if you run your OS on Ubuntu I recommend installing apticron, which will alert you to new patches. Stay fully patched.