Only Talk To Your Friends
For services which are only relevant for local users, disable general access
Example: if you telnet/rlogin in to maintain files, only accept telnet/rlogin from local nets, not the Internet
You may have to add a tool kit (e.g., TCP Wrappers) to accomplish this
You can also protect at the outer router