TCP/IP-level anti-reconnaisance and intrusion prevention to defeat hacker tools like Nmap and boost security with multiple layers of defense -- diagrams, tips and more in this article from Port80 Software:
http://www.port80software.com/products/servermask/tcpipmasking