title: Allowing REST URL within network, and blocking outside traffic
body: <p>Assuming my REST API URL is</p>
  
  <p><a href="http://myshop.com/rest/api/product/1" rel="nofollow">http://myshop.com/rest/api/product/1</a></p>
  
  <p>I would like to have this return data only when calling it within the corporate network, everyone else should not get any result back.</p>
  
  <p>Here are the use cases where they can/cannot be accessible</p>
  
  <ul>
  <li><p>User accessing it from outside the network but using it via a JSF/CDI application deployed on JBoss Server. (Should be accessible)</p></li>
  <li><p>User directly accessing the URL from inside the network (via rest client or directly typing the url in browser window) (Should be accessible)</p></li>
  <li><p>User directly accessing the URL from outside the network (via rest client or directly typing the url in browser window) (Should <strong>NOT</strong> be accessible)</p></li>
  </ul>
  
  <p>Thanks for taking a look.</p>