Guidelines on Securing Public Web Servers