only allow web to the shared IP