I managed to fix it for me. Two very helpful threads: https://forum.mikrotik.com/viewtopic.php?t=143990 https://forum.mikrotik.com/viewtopic.php?t=85703 The trick was to do MSS clamping, I used MSS of 1350, like this rule: 5 chain=forward action=change-mss new-mss=1350 tcp-flags=syn protocol=tcp src...