Securing Web Services with IBM HTTP

Greetings all,
I am currently working with a fully deployed Web service set with everything going smoothly. We are prepared to deploy this sucker, but we need to restrict access to it based on IP address, so that we willl roll it out to very specific sites (at first). We are trying to use the functionality within Apache (IBM HTTP Server) to restrict by IP, but you cannot restrict globally. We have restricted the directories and files under IBM HTTP, but our Web SErvice traffic rolls right through. So here's the question:
Is there a bridge between WAS and IBM Http Server that we can restrict with this type of access control? A module, directory, init. file, something? It doesn't matter what it looks like if it's rejected, just that the bad requests are weeded out. Thanks again, everyone..
-AS