The Stealth Kernel Patch for Linux v2.4.19 makes the linux kernel discard the packets that many OS detection tools use to query the TCP/IP stack. Includes logging of the dropped query packets and packets with bogus flags. Does a very good job of confusing nmap and queso.
d83f6c2d42f4c4d0faf46cfa16e9c460e0ce02fe230f12f4007615182d399738