Signature Detail
Short Name |
APP:SOCKS:SMTP-PROXY-HTTP |
|---|---|
Severity |
Info |
Recommended |
No |
Category |
APP |
Release Date |
2006/03/01 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: SOCKS SMTP Proxy Request via SOCKS using HTTP
This signature detects an attempt to proxy a SMTP (TCP/25) connection through a SOCKS proxy. Spammers use unsecured SOCKS proxies to bypass black-list services and force spam through. SOCKS proxies are installed on several versions of Windows and can be accidentally activated by enabling Internet Connection Sharing.
Extended Description
None
References