I'm thinking of writing up a little tutorial on port scanning, how to bounce your port scans through unsecured FTP and proxy servers and such, and some other stuff related to scanning hosts like DNS...