You mean you want to prevent people from interactively telnetting to port 25, but still allow regular SMTP mail through?
Sorry, that's impossible. There is _NO_ difference on the wire between those two operations, so there's nothing you can select on to permit or deny.