Hi,
Let me put your question clearly. You have some clients behind the Firewall . Those clients wants to access the SMTP and POP3 .
Just create policy to allow SMTP (25) ,POP3(110) and DNS (UDP 53) {DNS is required if and only if you were configured the SMTP and pop3 using name like smtp.myisp.com
like that)