Mangle DNS as follows: / ip firewall mangle add chain=prerouting protocol=udp dst-port=53 action=mark-connection \ new-connection-mark=dns-con passthrough=yes comment="dns-con" disabled=no add chain=prerouting connection-mark=dns-con action=mark-packet \ new-packet-mark=dns-packets passthr...