After digging around in my router UI, I think I might have assigned port forwarding…
The router has online help, and that suggests you only need to set the ‘from’ port value, which will select just one port, and forward it to the same port. I guess the range allows multiple ports to be forwarded to a single port, and I don’t think that is needed.
The ‘trigger port’ is for dynamic port translation. Not sure if this is needed, but I suspect not.
So I now have two ports forwarded, 80 and 443, for TCP and UDP traffic. Now to see if this allows direct cloud access…