iptables -t nat -A POSTROUTING -p tcp -d <ip of journal> --dport 80 -j DNAT --to-destination <ip of you webserver>
FreeBSD here, but I'll try something along those lines.
Still, I would also agree that rejecting *:80 would be the best until this IP as authentication issue is resolved.
grr....
/mike.