First of all, I’ve never liked to install the Microsoft Office plug-in or Outlook e-mail scanner plug-in that comes with AVG. In my experience, this has led to it wanting me to quit Outlook whenever it wants to install an update (or reboot the machine after the update is complete), which is a bother, and I don’t think it’s a very big risk to leave those components out. So, on my system with only the “basic” e-mail scanner installed, it is only able to scan mail sent through SMTP.

I recently switched to Thunderbird and I have one of my accounts set up to send through SMTP, which means AVG is able to intercept the connection and scan the mail. Even though I do not have AVG set to “certify mail,” it still makes some modifications to the message. Perhaps the most obvious is a message that it adds to the headers of the message…

Received: from 127.0.0.1 (AVG SMTP 8.0.169 [270.6.15/1649]); Wed, 03 Sep 2008 15:30:57 -0500

Of course, it makes sense for it to put this there, because it is actually intercepting the TCP connection used to send the mail and then relaying the mail to the server you specified in your e-mail client. Adding these relay messages to an e-mail will not make it fail validation as they are not covered by the digital signature.

However, oddly, AVG makes some other modifications to the message, as we see in this diff between the mail sitting in my Thunderbird “sent” folder and the mail that showed up in the recipient’s inbox:

I know that AVG caused this because I duplicated the behavior several times, and it stopped right after I disabled AVG’s mail scanner.

There are a number of other small changes like this. These modifications are to the body of the e-mail message, which is covered by the digital signature. The result is, the recipient cannot verify the authenticity of the message, as it appears to have been modified since it was sent (duly so).

Why were these modifications made to the message? Are they just strange errors, or is AVG actually trying to make the style information in the message more consistent for some reason? Whatever the case, your anti-virus software should not be modifying mail that you send, especially without informing you that it is doing so, whatever the modifications may be.

So, here we have a plus for digital signatures and a minus for AVG. I don’t seem to be able to communicate this to AVG support because I am using the free version. If any of you have a paid AVG anti-virus product, maybe you could pass the word along?

Anyway, I now am running AVG without any mail scanning at all. (I hope that common sense in dealing with attachments can keep me safe. )

Google Apps for your domain is great. For less than $10/year, you can get yourself a domain name. With this service from Google, you can set up things like Google Docs, Google Talk, and Google Calendar to run on your domain name. Perhaps the coolest one is Gmail. Google will host the e-mail on your domain for free and give you the nifty Gmail web interface on top of that.

But I’ve never been one for web mail. I’d rather use a desktop e-mail client, like Outlook or Thunderbird, mostly so that I can check all of my different e-mail accounts through one interface, utilize S/MIME digital signatures and encryption, and file all of my incoming e-mail without having to worry about running out of online storage space. (Granted, Gmail’s online storage space is very generous and makes this a non-issue… And it also pushed Yahoo! and [Microsoft] Hotmail into offering large online storage for mail as well.)

Fortunately, Google offers POP3 and IMAP access to your Gmail mailbox, so that you can use virtually any mail client with their service. This is also free. Great, I can have them host my e-mail, that means I don’t have to worry about setting up a server and making sure that it is up all the time, or pay someone else to run a mail server for me. And, I can create whatever account names I want, they will all be at my domain, and I don’t have to worry about name collisions with existing Gmail users.

Should I use POP3 or IMAP to access my mail?

IMAP may seem to be the obvious choice. You get access to the full Gmail “folder structure,” including the spam folder, trash, sent items, and all of your archived messages.

I’d rather use POP3, myself. My connection is a little slow, and in either Outlook or Thunderbird, when I try to view one of my Gmail folders via IMAP (the Inbox or whatever), the application becomes non-responsive while it connects to the IMAP server and refreshes. If I use POP3, mail is downloaded to a local store on my machine, automatically deleted on the Gmail server (preferred behavior for me), and the local mail client runs smoothly.

Enter Gmail’s spam filter. Google looks at all incoming mail and delivers suspicious e-mail to your “spam” folder instead of your inbox. There’s nothing wrong with this… In fact, I’d expect any respectable mail provider to do some spam filtering like this, as spam is a huge problem nowadays. Anyway, I have a problem with how this is implemented against your client mail application, whether you are using POP3 or IMAP.

When using POP3, only messages in your inbox are downloaded to your mail client. Messages in the spam folder are not downloaded. This means I have to remember to go to Google’s web interface and check to see if any messages have been misclassified as spam from time to time. (Don’t give me any “Google’s spam filter is great, you don’t need to worry about it!” talk. I had a misclassification that started me on this whole investigation, so that I don’t have to worry about it anymore.)

When using IMAP, at least you have access to the spam folder, so you can easily see if any mail has been misclassified. However, I use my mail client to check four different e-mail accounts, and only one of them is provided by Gmail/Google. If I want to take advantage of the mail client’s spam filter, this throwing the spam out of my inbox is annoying — I may have to check multiple folders for junk and I’d like all of the suspected junk from all of my accounts to go to one place.

Ideally, I’d just set it to POP3, disable the server-side spam filter, and do all of the filtering on the client. Google doesn’t give us this choice, though, there is no option to turn off the spam filter or even to change its behavior in any way. So, I’m stuck using the laggy IMAP account, because I want to keep an eye on the spam folder.

I’ve been searching the Internet for solutions to this problem. Lots of people have posed the question “How do I download the contents of my spam folder via POP3?” Maybe someone has answered that question, but I didn’t find an answer after checking 20 or so pages. Most of the responses were, “You can’t,” or, “Use IMAP instead.”

But today, I believe I figured it out! Here we go.

• Log into Gmail, go to Settings, and then filters.
• Create a new filter.
• In the from field, type: *
  (That’s right, a single asterisk.)
  Leave the other fields blank.
• If you do a “Test search”, it should match all of the mail in your account (except mail that is already in the spam folder).
• Click on “Next step,” and then check the box “Never send it to Spam.”
• Save the filter. Now no incoming mail should end up in the spam folder, which means your POP3 client is free to download it.

Thanks Google for making this straight-forward. Hope my little rant helps someone.