You can create a file called recipient_access
(the name doesn't matter) containing:
Then, postmap it:
And, finally, in main.cf:
This will still allow anyone in $mynetworks to send mail to those addresses. If you don't want even that, put
check_recipient_access above permit_mynetworks.