Anyone have a 123 simple guide for basic security locks on jboss? I have jboss ready to roll but localhost:8080 brings up admin. Even though Im behind a firewall and technically the site cant be touched better safe than sorry.

Does anyone have a link or a quick check these 123 so I have basic security?

I've googled and have 20 - 40 page docs on jboss security. Im just using the servlet container as a web development site. Just need the down and dirty lock down.

earl