For wireless, you need to be using WPA, either with TKIP or AES (preferred). You can use WEP, just make sure that if you do you use 128 bit, and that you change the key on a regular basis. Also use MAC filtering. Turning SSID broadcast off can be a good thing, but if you're using encryption then it doesnt really matter if you do. Someone skilled enough to crack WEP keys is skilled enough to find your network even if SSID broadcasting is disabled. If you want to get extreme and you have the ability to control the power output on your radio, you can turn the power down to cover only the range you need wireless access in. No point in broadcasting the signal half way down the street if you only need it in a couple of rooms. If it's a G access point, and you've got all G clients, then you should disable access to B clients...vice versa if it's a B access point.
As far as ports go, every port coming into the network should be disabled to the outside. Firewalls do this. Only open up ports you need, such as for a web server, or for games. Only open them up to a specific host inside your network.
Facebook
Twitter