I usually close all ports on the modem/router and forward only the needed ones to the server, this somewhat insulates the rest of your home network.