Sorry to open older topic, but I have the very same problem. Whitelist doesn't work. Only the default 127.0.0.1 works. Doesn't work for any other IP I add.
Double checked if there's default in "to".
Tried to use /etc/MailScanner/rules/spam.whitelist.rules. Didn't work.