Re: ISP DNS server is UPD port scanning my DNS server?
This is completely benign traffic. Your DNS server is apparently forwarding lots of different queries to the ISP DNS server. This is a common setup. The sensor is mistaking the numerous replies from the ISP DNS server as a port scan. This is a known benign trigger. You can eliminate these by filtering out your ISP DNS server as a source for signature 4003.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...