[Exim] submission port

does anyone have any suggestions on how to set up a separate exim
listener on port 587 (the submission port) in parallel with a normal
exim installation?

i plan to force SMTP AUTH on the submission port and permit relay for
authorized users, and eliminate all the small holes i punched on port
25 to allow selected email addresses to relay.

it looks like i need to run a different config file, and in order to
avoid having to duplicate a lot of complex setup between the two
configs, i probably want to run the submission port listener in
queue-only mode.

am i on the right track?

thanks,
richared