Locking down Linux and SNORT

All... I am in the process of convincing my company that we should have alternative OSs and Security. We are a fully MS shop.. I have installed RH 7.2 and plan on loading Snort. Does anyone have a checklist of things that I should have locked down in Linux before I add it to a network. And what do I need to do or what needs to be done to add Snort to the system. Any advice/tips/recommendations/warnings/prayers for me..

thanks in advance..

rob

Ive added a partial answer here