Is it necessary to allow incoming connections to port 25 to send (not receive) mail?
Some mail server somewhere must receive mail sent to your domain. Provided you're not talking about that mail server and that mail server exists somewhere else, then no. Not every machine that sends mail must be capable of receiving it. However, to have a domain that operates as a legal source for email, it must have a mail server somewhere that accepts postmaster mail and bounces.