good info. I suggest also looking Bastille linux and SE linux, and the Oreilly book "Network Security Hacks"

http://www.amazon.com/Network-Security-Hacks-Protecting-Priv...