Originally Posted By: DWallach
Maybe run it in a VM to isolate it.


I'd put all of the Internet-facing stuff in a VM, even in separate VMs, such that they had no access to data you care about.

Further to that, I'd investigate using a VPN, rather than leave RDP etc. open to the Internet. The one built into Windows is probably pretty good.
_________________________
-- roger