Make sure you're running up-to-date services

There are some services that you can't do without. In these cases, make sure you are running the latest version. The two biggest offenders are sendmail and bind (name server).

Visit freshmeat often.