Ruleset to lock domain to IP address

[Brian Parish]

We plan to introduce some premium filtering options for some domains. 
This will result in all incoming mail to a given domain arriving from a
single known IP address.  To prevent "back-dooring" we'd like to lock
that in so any incoming mail to a given domain from any other IP address
is rejected or dropped.  Can I create a ruleset to achieve that?

TIA
Brian