If I follow the perfect setup instructions for Debian Etch on a VPS that I plan to use for web hosting, but then don't install ISP Config, what extra security or firewall do I need to set up? Would just adding fail2ban be OK? Thanks in advance if you can help.
You don't need a firewall unless you run services that you don't want the outside world to connect to. fail2ban is good for blocking brute-force attacks.