There was a good presentation on this at Lotusphere this year. You can order the video from somewhere on the www.lotus.com website. The video is called:
'Domino Web Server Security Step-by-Step' and the session was ID103 It'll cost you a couple of bucks but.... Also there are quite a few articles on www.notes.net in the Sandbox and some Redbooks at www.redbooks.ibm.com. Hope this helps.
