FC4 security question

[technossomy]

I have a FC4 server machine running since the last few days and the installation went with the default security settings. I have since stopped a few services, checked that the firewall was up and running and checked some soft security practices (passwords, backup/restore etc). Also the modem it uses to connect to the Internet has a built in firewall.

My question is then how much more I need to delve into Linux security practices. Can I be considered reasonably secure if there is limited ftp-usage, and practically no email usage and leave the system practically to its near-default setting?

Thanks in advance

Tech

[spoon!]

One thing I would suggest to to diable root login for SSH: edit /etc/ssh/sshd_config and uncomment the line with "PermitRootLogin" and change it to "PermitRootLogin no".

[technossomy]

Thanks spoon, I just established that this is the default setting as well.