Hi there,<br><br>when I have my Tor server active as an exit node, and mail ports are allowed in exit policies, I often see the notification balloons of my "AVG Anti-Virus Free Edition" popping up, briefing me about e-mails currently being scanned and connections to servers I don't know or use, while no mail software (and most probably no malware) is running on my machine.<br>
<br>I guess these must be POP and SMTP connections exiting my Tor node, that are catched by AVG's "AutoPOP3" and "AutoSMTP" e-mail scanners. I wonder if this really works! I wouldn't mind if it did, because I do not experience any problems when AVG suddenly jumps into action. There certainly is some CPU usage, but it is negligible, so this could be considered as an extra feature or "special service" of mine.<br>
<br>Note: AVG can remove infected attachments, and it can modify the subject noticable when a virus is found. It also can put a certification info at the end of the mail text, and it will always add a "X-Antivirus:"-Header.<br>
<br>According to the settings, the scanners use port 10110 for POP3, and 10025 for SMTP, but somehow they catch all traffic on standard ports 110 and 25.<br><br>