That's a great idea...Perhaps in addition to listing ways to alter OS signatures, config firewalls, etc, maybe add in what ports/services to disable/block.

In reading through some of the threads...