I didn't see this mentioned here before, but did you take a look at http://www.debian.org/doc/manuals/securing-debian-howto/ [RicV]