I am troubleshooting issues getting to Tunein for Internet radio. From Both Sonos, initiated from iPhone (10.1.10.38) or Win7 PC through browser. Attached is an export from Mikrotik CRS326. In the attached screen shot from Wireshark, it appears the RST (reset) is occurring at the router since the time to live= 64, it has not been routed yet. I am not sure why??
I was able to resolve this issue. The CRS326 ROS 6.41rc52 had been compromised in August. I rebuilt the router and identified the sporadic access issues - e.g. Tunein. Also, upgraded.
It turns out the IP address from my ISP had been blacklisted by several sites - e.g. Cloudflare. I was able to get the IP address changed and everything is working as normal.
I figured this might be useful as I had many hours spent trying to resolve a firewall issue that did not exist.