I’ve made up a series of rules specifically allowing Kerio to connect to my ISPs mails servers so nobody else is getting in or out but I really want to know why avast would try to connect out to someone I don’t know… Email scanning is still working properly…
Any ideas? This is bugging me because I’m worried it’s some infection, despite me running avast! in all it’s forms, PGLite, Kerio Personal Firewall 2.1.5, K9 Spam killer and running Spyware checks all the time.
The mail scanner intercepts all outgoing connections to mail ports (25, 110 and 143) and creates its own connections to the same address. It means that some program running on your computer established a connection to the address that you see in the firewall. You can check what process has a connection with the mail scanner (ashMaiSv.exe) in the firewall status window when you see the timeout message to find out the original program.
Yes, as explained by Vojtech and Eddy, mail scanner does NOT initiates connections to any server on it’s own. It simply forwards connections initiated by some other software running on you PC. You should be aware, that some unwanted mail connections may be even initiated by viruses or trojan horses - so perhaps it’s a good idea to scan your harddrives.