Your transit provider could be blocking port 25 (especially if the test from Heimir passes).
If you can telnet to it on the local LAN, but not via the external IP then either the transit provider has it blocked or NAT translation/routing is broken (includes firewall issues on the external interface).
MailEnable survivor / convert --