web security

This is a multi-part message in MIME format.
--
[ Picked text/plain from multipart/alternative ]
The redbook AS400 Internet Security: Protecting Your As400 from Harm on the 
Internet, suggests restricting selected ports to specific user id that have 
password = *none.
80 to QTCP, QTMHHTP1, QTMHHTTP
23 to QTCP
are their others that should be restricted for other services?
lpd, dns, whatever?
let's just say the firewall in place is "limited" and out of my control.
looking for things to bolt down.
jim

--