I have a standalone Ubuntu 10.04 server (+ gnome) with a wireless 3G internet connection that is used to download data from an ftp server, process it, and then upload it again.
Remote administration is performed on the machine via ssh over a different port, with root logins disabled and an exclusive hosts.allow list for ssh only.
The data processed on this machine is somewhat sensitive.
My question is, what are the security concerns that I should address? Should I close down port 80 and other ports? As I also have to be mindful of internal users getting data out, is there a way to only allow ftp connections to the correct host? Should I disable access to usb ports etc? Should I be concerned about the 3G internet security?
Any help on the situation would be much appreciated! Thanks!