Along with previous suggestions, I'd recommend switching to a non-standard port. It's not really security against a determined attacker, but it cuts out 99.99% of the random Internet drive-bys. Darcy.