Subnet masks within a subnet

Is VLSM the only way? I need to grant access for .175-.253 while denying acces to .1-.174 & .254 This is to be done on a web server mind you, not a router. Thanks, Alan.