Hi,
You are talking about one client, by this you mean one recipient domain not on your site?
Or by other words, mails from one scanner to one internet domain fail with error "553 5.3.0 _dialup_reject_", right?
I personally havent seen these errors, no clue ;-)
But, what about telnet from one the working scanner and the other one?
Is there any difference in lan connection, ports, etc?
Are you using enforced TLS or opp TLS - possibly handshake errors, or non rfc compliant disconnect by offering client certificate, or cert errors anyhow?
I would suggest try telnet, then openssl, then tcpdump and you should figure out whats wrong.
Regards
Thomas