Instead of downloading the srpm why not just run rpm -q --changelog postfix | less and read that?
Nice, it looks like it's not backported. I looked at an rpm I _know_ is backported (xen 303) and it's easy to grep for the possibility as they call it out!
I guess I don't have Postfix 2.4x :(
Thank you everyone! jlc