Who knows, but why would your firewall exactly permit portscans. Better question, how could it stop it. All the portscanning is is sending packets and seeing which ones get threw and which ones get blocked by the firewall. Normaly doesn't matter eatherway though, just becouse, your firewall doesn't have to block portscans, just non authorized access.