Clients with ZfD Agent residing in LAN outside a BM 3.7 SP2.
Middle Tier server resides on another LAN inside the firewall.
Middle Tier login to eDir fails, with the systray Application Explorer
spinning forever,
even with ZfD-agent pointing directly to Middle Tier server
Ping OK between client and Middle Tier server.
No related entries in BM deny-logs.
Same client config works OK when the clients are on the same LAN as
Middle Tier server.

How do I connect the ZfD-agent Middle Tier login thru BM?
What are the filter execptions needed?