Finally working changed it to 587 with ENABLE_START_TLS true and commented out #DISCOURSE_SMTP_AUTHENTICATION: plain
I was sure I had tried this at some point today. Perhaps I put the port number back to front or forgot to rebuild discourse in between. The moral don’t do things when you are tired and stressed!