You can whitelist the gateway address, then blacklist a range including public IP addresses above and below that address. Whitelist entries are considered prior to blacklist entries, so this should restrict incoming SMTP to your gateway servers.
Kyle Kerst
IT Coordinator
SmarterTools Inc.
www.smartertools.com