I have 1,000+ of those in my Inbox. I know I can turn the notification off, but I would like to understand what triggers the portscan. The source IP is my desktop and I have no special software on there, at least nothing unusual. I did not get this in V6. Any hint what logfile I can find out what type of traffic triggered the notification or explanation why V7 is different as V6 in this case?
The mechanism to detect portscans is the same like in v6. Anyway it's a litte bit different in its configuration. The weighting of low and high ports is different. Low ports get more attention. Have a look into /var/log/packetfilter.log to find the source of the portscans.
