If you want to allow any host on your network to simply check their email at an ISP’s POP3 server, set up the following stateful filter exception to pass TCP port 110 traffic through.