Enforce whitelisting on port 25 on "legacy" submission policy. Refs #2422

If the client IP address is listed in
/etc/postfix/submission_whitelist helo and recipient checks are
skipped on both submission (587, 465) and SMTP (25) ports.

This makes the "legacy" policy compatible with old setups (from
migrations).