This sounds to me like a normal black/white list, but everything is on the blacklist by default.

I imagine this can be achieved with most mailboxes with a simple deny all rule and then cherry picking email addresses to whitelist.