SMTP Submission timeout

I'm triyng to use SMTP via the submission(587) port. I see postfix correctly listening to 587, I can telnet to that in LAN and from outside, but when I try configuring an email client it says "Connection timed out". If I use port 25 or 465 everything works perfectly.
This is what I see in logs:

Code:

Nov  2 09:19:34 demo postfix/smtps/smtpd[864]: connect from unknown[2000::ff8d]
Nov  2 09:21:14 demo postfix/smtps/smtpd[864]: SSL_accept error from unknown[2000::ff8d]: lost connection
Nov  2 09:21:14 demo postfix/smtps/smtpd[864]: lost connection after CONNECT from unknown[2000::ff8d]
Nov  2 09:21:14 demo postfix/smtps/smtpd[864]: disconnect from unknown[2000::ff8d]

(it happens in ipv4 as well)

 

did you enable submission in your master.cf?

 

yes it is, netstat shows port 587 open:

Code:

smtp      inet  n       -       -       -       -       smtpd
#smtp      inet  n       -       -       -       1       postscreen
#smtpd     pass  -       -       -       -       -       smtpd
#dnsblog   unix  -       -       -       -       0       dnsblog
#tlsproxy  unix  -       -       -       -       0       tlsproxy
submission inet n       -       -       -       -       smtpd
  -o syslog_name=postfix/submission
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
smtps     inet  n       -       -       -       -       smtpd
  -o syslog_name=postfix/smtps
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject