Google App Engine Firewall: Restrict access to all services but the default one : <p>I have a GAE project (flexible) consisting of 1 default and 2 subservices:</p>

<ul>
<li><code>foo.appspot.com</code></li>
<li><code>service1.foo.appspot.com</code></li>
<li><code>service2.foo.appspot.com</code></li>
</ul>

<p>Now I want to use <code>foo.appspot.com</code> as API proxy &amp; auth gateway to the internal services <code>service1</code> and <code>service2</code>. The proxy itself I wrote and it is working fine.</p>

<p>I am struggling with adjusting the GAE Firewall to forbid incoming world traffic to <code>service1</code> and <code>service2</code> because I would like force an API user to send requests to <code>foo.appspot.com</code>. Traffic to the default service <code>foo</code> should be allowed.</p>

<p>It seems I can just enter IPs in the Firewall settings but not service names. The docs says that it should work but does not show how.</p>

<p>Thanks for the help!</p>
