Yup. This is what you do, 1. Create a Definition for your POP3 Server. Call it POP_SERVER 2. Set up a DNAT rule Src: Any Dst: External Int. Svc: POP3 Change Dst to: POP_SERVER Change Svc to: No Change 3. Enable POP3 Proxy 4. Create a Proxy rule for Src: Any Destination: External Int. That should do it. You don't need to create a packet filter rule. ASL creates the POP3 Proxy rule by itself.