Wayne is right just make sure not to make any configuration errors. For example make sure that the external administrator page is not enabled. I have seen this mistake on many routers. Also, as he said no port forwarding unless you absolutely need it. Make sure that you change the default password too.
Spyro