User/IP Restriction

This may not be possible (without coding), but I was asked to help restrict
a user and IP address. Basically, we will have a non-400 webserver allowing
our clients to look at their bills (read-only) that reside on our 400. We
will have the one user profile doing this from this one machine. Is there a
way to limit this user profile from only accessing the system from this one
IP address?

What I'm thinking we may have to do is rely on resource security and user
profile parameters for the user profile and not worry about limiting it to
the single IP. As far as the IP address goes, I'm seeing that we may have to
use exit points (we have Powerlock) to reject that IP address on ALL servers
one by one (ftp, telnet, etc.) except the server that we will use to
retrieve the data.

Does anyone have a better way or other suggestions?

Thanks in advance,
Chris Whisonant