I just published firewool, a rails 3 firewall in sheep's clothing. It lets you specify IPs you want allowed and blocked with a filter. So you can restrict IP access to controller actions and therefore, URLs. There are more ideas of usage in the README.