Why do you need port 25 for owa?
If you indeed do need it there is no way to allow smtp from only your email provider, then allow it from outside addresses. Maybe I'm not understanding the situation properly.
To set it up for 443, simply add another entry to your acl. Whether or not you need another nat translation depends on your current static statement. Could you post it?
