as for firewall, iptables should work nicely.
safety is best kept with aptget ... to latest versions. OR preferably installing Debaian Stable (3.0r2 iirc) and use all the knowledge out there to secure it.