I recently took a look at my webserver log and noticed alot of queries for cmd.exe. Even though it's just looking for windows apps, this got me thinking about my security policies. I have a webserver running and smb sharing. I'm not familiar with security, what is the best thing i should do, besides the obvious, turning on the firewall (or is that all i can do?)