I recently updated to GW7 and wound up having to drop Webaccess on an
internal IIS server (actually our GWGuardian) because it didn't seem to
like Novonyx at all.

I'm trying to figure out how to make a secure exception (relayers are
always beating on the door) to allow an internal IIS (a GWGuardian) server
to serve up HTTP traffic.

Heres a basic diagram of how things sit. (BM server serves up public html,
does nat/proxy, dhcp, MPR..)

Public traffic cannot touch until a dynamic/tcp allow rule is set
on public/public. - But in doing so, relayers have a field day.

Every way that I've gone about trying to restrict the relayers results in
no access to GWGuardian and hence, webaccess. (It'd be nice to be able to
get both from outside, yes?)

Any/all help GREATLY appreciated!