The Stealth Kernel Patch for Linux v2.2.20 makes the linux kernel discard the packets that many OS detection tools use to query the TCP/IP stack. Includes logging of the dropped query packets and packets with bogus flags. Does a very good job of confusing nmap and queso.
c5848d9fd5af0164aee0fca477ec5c21e39ce2cade88a6e50fd1b459e1b2bfa5