Every so often there is a suspicious file that makes it's way over to our webserver. This time it was an index.php file that is known for identity theft. I usually delete the file and then change the root password for my webserver.
What else can I do to ensure this does not happen? How can I maximize security on my linux box.