prevent fin null and x-mas scans on your network?

How do you prevent a hacker from launching FIN, NULL, and X-MAS scans on your network?