It should look like this:
Your server still does not advertise a lot of things, STARTTLS among them.
Before, your server required TLS but did not advertise STARTTLS capability, so there was no possibility for the client to comply, therefore you got a fail for MAIL FROM.
Now, your server does...