On a Fedora Core 3 machine i have to install apache, sendmail, and configure iptables.

For hardening it i will be running bastille script

I have never earlier done it
So i want to know whether bastille should be run after fully configuring the machine or just after the OS is installed, and on top of it other applications should be installed and configured.