Kernel Configuration
Unless your firewall will need kernel-based services such as NFS, rebuild a kernel that does not include them (if possible — this is vendor dependent)
If your kernel has network management hooks or built in SNMP, and you’re not using them, disable them