I can't think of any reason for you to close port 25 on your firewall if you're running an SMTP server. What you do need to do though is configure your firewall so that port 25 is only open on the external IP address that is associated with your e-mail server and you have the necessary translation rule through to the internal IP of your Kerio server. Also, make sure that outbound SMTP is only allowed from your e-mail server.
As long as you don't have the 'Open Relay' option selected on the 'Relay Control' tab, then you will be ok.