Just to jump in quick, did you first confirm postfix fires up submission, is binding to the port and listening?netstat -nlp46 | grep master
Sorry, i typed faster than my brain. I know its not submission, but just confirm its listening on 465 and on the public IP? Maybe its only listening on local loop back, etc.