spp_portscan

["David Gitman" <david () gitman net>]

My DNS server (only my secondary) keeps showing up as a port scan.  I
set 
 
var DNS_SERVERS [166.84.143.28/32,198.7.0.2/32]
 
but still am seeing 
 
12/18-06:30:22.075845  [**] [100:2:1] spp_portscan: portscan status from
198.7.0.2: 1 connections across 1 hosts: TCP(0), UDP(1) [**]
 
any suggestions?
 
Thanks,
 
David Gitman
david () gitman net
www.gitman.net