How to make PostFix listen on port 587:
http://rackerhacker.com/2007/07/04/enable-submission-port-587-in-postfix/
Only allow some users to use port 587 for SMTP:
add -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject to the smtpd 587 command line in master.cf
