That reminds me, you should consider putting up a packet filter and only
allowing connections on ports 80 and <whatever SSH uses; forgetting
right now>.
Plaintext logins are a Bad Thing... SSH is a good thing. And CVS can
run inside of SSH (duh, but worth noting).
--
"A goal is a dream with a deadline."
-- Harvey Mackay