many firewalls etc incorrectly assume that all connections winmx makes to port 25 are for email, as email will normally use port 25 (using SMTP) for sending to servers. Several (mostly japanese) winmx users use port 25 for winmx because of ISP restrictions etc so that would be why winmx is connecting to port 25.