selinux was enabled
you need to add the port 587 to http_port_t
semanage port -m -t http_port_t -p tcp 587 # so that haproxy can bind to port 587
also need to open port 587 in firewall
firewall-cmd --permanent --add-port=587/tcp
firewall-cmd --reload