Problem: Outbound mail succeeds, but inbound replies fail to arrive.
Fix:
Forward Port 25 (TCP) on the local router to the NAS internal IP.
Run an external test: telnet mail.<domain> 25.
A 220 mail.<domain> ESMTP Postfix response confirms the ISP is not blocking the port. If mail still fails, the issue is standard DNS propagation delay.