I can't think of one good reason why you'd have more than 80/443 and maybe 22 be open to the Internet on a Web server, but what do I know, I don't run a furry porn site. Oh, and if you open 22, use pubkeys and disable keyboard-interactive or whatever SSH calls password auth. Because...well, one word: "hysterix"