when someone scan you computer, he/she will get two diferent O.S. signatures:
- one signature for those forwarded ports (if gateways O.S. differs for final O.S.)
- one signature for all remaining ports (answered by gateway)

with 15 secs of thinking time. attacker can guess that there is a FW/Gateway in front and some server behind him....