Hacker News Reader

So it handles firewall rules, disabling root login and all those details?

Yes. And comes with a neat status page to warn you of any issues in case things change (but they shouldn't if you use a dedicated box).