Charley, you need to do something about the label below your name
That was excellent advice.
I will add to you third point.
Be constantly aware of the status of your Anti-virus/anti-malware product when you have a port open to the outside.
One of the first things the bad guys do is block updates if they can't just kill it outright.