Here is a new per user whitelist system that works with smartermail and declude.
It allows for per mailbox configurable whitelist / blacklist as well as global black list management all via a web page.
It uses a pop login to authenticate the user.
Web interface is aspx based.
http://pocketbusinesstools.com/whitelist.htm
Rhett