How to secure Exchange?

I have an email exchange server setup to send and receive mail.

What points do i need to look into to secure it?

-DOS attack / firewall? Or maybe put exchange behind a firewall? Install a firewall on it? Maybe not such a good idea?

mm what else comes into mid for securing it?