5 is now also solved \o/
I'm using IPTables to allow ONLY the spamsnake on port 25.
Postfix on the mailserver has been changed to port 587/TLS SMTP for my mail users.
uncommented below in master.cf enables submission port 587.
Code:
submission inet n - - - - smtpd