As to your bigger question, Security is a process, not a checkbox.
Some things to think about:
1) How "guessable" are your users passwords?
2) Running any CGI scripts?
3) Do you have PHP enabled?
4) How up to date is your OS? All patches applied?
5) If some spammer was sending crap thru your machine ... how would
you know?
Aloha mai Nai`a!
--
"Please have your Internet License <http://kapu.net/~mjwise/>
and Usenet Registration handy..."