Looking over your note again, I didn't see any mention of either defaulting the filters or creating a filter for the email proxy. If you don't already have one, you need to have a filter to accept TCP port 25 on the GNAT Box EXT address.