Demaestro - 11:23 pm on Jan 20, 2011 (gmt 0)

Open 22, only for your own IP(s) (SSH and SFTP)

I would advise that you define a non default port (not 22) for SSH. You wouldn't believe the amount of brute force attempts that are made on port 22.