Securing Your Server?

In the past week or so we've had countless attempts at people trying to hack into our sever, most noteably when somebody tried to get FTP access to corrupt files, but made sure to spoof an admin IP so it would go unnoticed. So, as you can imagine, we're starting to get a bit paranoid. Aside from install most of the 3.5.2-4 security hacks on this board (which was already somewhat planned), what else can be done in terms of server configuration, software, firewall settings, ect to help better secure our box?

[Carnage]

something else thats worth a go, take a look at your apache error logs from time to time (i often notice people attempting to access none existant files like for example, known buggy web apps) It also may give up some information about people attempting thigns like inserting shell commands into session cookies ?!? (All this results in is the site blocking with a fatel error message)

[GrCh_Jeff]

Here is a question.Is ssh faster at uploading to the server than ftp? I have cable 3meg down 256 up and when uploading files to the server it only uploads at like 30 to 40 kb a sec. .

[DavidN]

Originally Posted by GrCh_Jeff

Here is a question.Is ssh faster at uploading to the server than ftp? I have cable 3meg down 256 up and when uploading files to the server it only uploads at like 30 to 40 kb a sec. .

I find SCP from a windows machine using pscp really slow. scp from a Linux box can use my full bandwidth. Very odd.

Although, btw 256k up is ~32k/s