Howto create pinhole from CP vlan to internal lan and allowing syslog

[Guest]

wireless lan 192.168.90.0/24
internal lan  192.168.55.0/24

Is there a way to create pinhole from my wireless network(protected by cp) into my lan and allowing tcp 514

can i somehow allow some rules to be active without authentication.

i noticed the "allowed ip address" under cp but that allows all traffic into that ipaddress and i just want to pinhole it.

ideas?

/Fredde