About preventing from internal network discovery

[timmy]

Hi guys,
I have an internal network with serveral linux servers there. I also have a linux firewall connecting internet and the internal network.
I heard that someone can use tools to discover the existance of internal network from the internet. Is that correct? If so, what program should I run to prevent this happen and how to set it?

Thanks!