The pound homepage describes how you can filter based on IP rules.

We ran into a similar issue here, and we wrote a small ISAPI filter for IIS that restricts access (and in some cases expands access) based on the IP address.

James Evans wrote:

Is there a way to make pound restrict access to certain directories based on IP rules? I used to restrict with IIS but now it sees all requests coming from the pound proxy.

Thanks!