Just so others can learn from my experience: make sure to have a firewall rule to allow outbound to the SMTP relay that you specify. Fortunately, I thought to look there before posting here.