OK, with the syslog entry Noel suggested, I can see traffic has arrived on submission port. Yet if I grep for the IP connecting, I see no sasl login.
Oct 18 14:39:24 myserver postfix-internal/submission/smtpd[25329]: connect from blk-222-132-252.eastlink.ca[24.222.132.252] Oct 18 14:39:24 myserver postfix-internal/submission/smtpd[25329]: NOQUEUE: reject: RCPT from blk-222-132-252.eastlink.ca[24.222.132.252]: 454 4.7.1 <usern...@ns.sympatico.ca>: Relay access denied; from=<u...@example.com> to=<usern...@ns.sympatico.ca> proto=ESMTP helo=<[192.168.0.5]> There must be a config to be tightened up somewhere in there.