be careful with awstats. it had some security issues which
(reportedly) caused machines to be breached. check the archives from
february/early march. the issue(s) may be resolved in the version
that you have, but i'd suggest taking a careful look at the reported
problems before installing it.
I'm running the latest version. In any case, Apache is set to accept
connections only from inside our NAT'd firewall.