Signature Detail
Short Name |
VIRUS:SMTP:LOCALHOST-HELO |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
VIRUS |
Keywords |
Localhost Used in SMTP HELO |
Release Date |
2004/02/11 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
VIRUS: Localhost Used in SMTP HELO
This signature detects the hostname "Localhost" in the HELO command for SMTP. This can indicate a mis-configured mail server; however, this can also indicate a malicious program (such as a worm or virus) that uses this hostname to avoid reverse lookup failures.
Extended Description
None