Did you read this post?
Different request (per user route) same solution (firewall rule on the ip assigned to the user)