so, why would test yiffit be able to communicate outwards but not main yiffit? They have extremely similar config. I'll have to check tomorrow.

This is extremely weird. Yes, test yiffit and main yiffit are in the same network, but both are still routed through cloudflare.