How can I allow few pages in a website and block all?

You need to do next:

1) Create all allowed URLs on "Security ›› Application Security : URLs : Allowed URLs : Allowed HTTP URLs" page

2) Remove pure wildcard (*) URL (if exists)

3) Enable Alarm and Block for "Illegal URL" violation

Thanks, Ivan