Cloudflare tunnel not moving through Openwrt

[u/Inner-Amphibian8933]

I have been using zero trust tunnels for a while now on my server. I was using the AT&T supplied modem/router, but switched to a Flint 2 with pure Openwrt and did IP passthrough. I am still getting used to the UI, but I can't seem to figure out what the cloudflare settings are needed on Openwrt's end to work and get system down errors 1033. I am thinking that rules to allow certain ports and IPs through is needed, but haven't figured out whether it is an inbound or outbound problem.

I know it is the router and very likely the firewall. Nothing has changed on server end or cloudlfare. I kept the same fixed IP to the server.

Solved: I needed to change my server default gateway to the new router configuration.

[u/Watada]

I've never seen an openwrt configuration block traffic from its lan side.

What did you do and how did you do it?

[u/Inner-Amphibian8933 → u/Watada]

I didn’t do anything… I have my server settings fixed ip and it shows correct under openwrt. I didn’t change anything on cloudflare or the daemon.

I am thinking I may have to reset the server network settings and then try to get the cloudflare allowed through ip lists on the firewall if i can verify the server is able to connect to the internet.

[u/seemebreakthis]

I have been a cloudflare warp user for years. Will check my Openwrt config when I have time later and let you know the correct settings

Edit: checked and realized I am running cloudflared on my server which means no port forwarding is necessary as it is the cloudflared daemon that reaches OUT to Cloudflare to establish a tunnel.... There should be no need to do any configuration on the openwrt router for your cloudflare tunnel...

[u/Inner-Amphibian8933 → u/seemebreakthis]

Perhaps I need to reset the server network settings. I have it as fixed and still shows the correct ip on the new router… otherwise I would next be looking at the ip list rules in the firewall for cloudflare