You could try to create 2 Who objects:
* the domain you want to whitelist (source-domain)
* the domain you want the whitelist to apply (destination-domain)
And a rule:
* From source-domain
* To destination-domain
* action: ACCEPT
haven't explicitly tested this -so please make sure it does work!
hope this helps!