I thought I would just put this out there and see what kind of response I get and or what suggestions you would recommend to a newbie. I just followed Fedora 8 (perfect server) how to, I also installed ISPconfig. So what steps would one take to make their server more secure? how would you test your server to see if it is locked down so that only the features you want are accessable to those allowed to use them. It is an open question just want to get ideas or things to look for on my server since I am a newbie when it comes to linux.
You could try hacking it your self from off site and see if you can get in using ports that are supposed to be closed off
Within ISPConfig >Tools > Portscanner > you can check which ports are open or not. Only the ports you need for your services should be open. Within ISPConfig > Management > Server > Services > Firewall, you can manage the Firewall.