Just one more ... resource for you if your boss insist on compiling AMP ... you will need to refer to often me thinks.
Here is September:
Here's one on Firewalled
Unless you are still using iptables might want to acquire the update to firewalled.
I happen to like the new firewall as it has a zone for dropped ... easy to have your server inaccessible to a bot network - all services/all ports - or a particularly agreessive scanner which sucks your server of bandwidth/resource usage. Let the researchers research ... just not at your server .... considering it's current issues, might want to consider using drop zone.
Ok, now am done!