PPTP client (mostly) working, need quick tip for inbound TCP traffic!

Hey guys, I’ll try and keep this short, really hoping for an answer on this one.
I followed this guide to the letter: https://matthewmcclatchey.com/using-private-internet-accesss-vpn-with-mikrotiks-routeros-via-pptp/

It works great for my phone, I can quickly enable or disable it in the address list for testing. Checking the WAN IP shows the VPN IP and all is well. HOWEVER, when I add my Xbox 360 IP address to the list, it can connect OUT (initiates a socket connection in 60-80ms), but it is NOT able to get TCP data back over the open socket.

The server is able to see these sockets being opened, and tries to send data back unsuccessfully.

Of course, the second I remove the IP from the address list, it works perfectly. I am ONLY trying to avoid the typical DDoS that happens on Xbox Live, I don’t want the VPN on any of my other devices. I have tried 4 different VPN providers (lent to me by friends), and dozens of different servers from those providers. Again, they all work on my phone. Any help?

Software/hardware: RouterOS v6.40rc24 on RB3011UIAS-RM

EDIT: Have tried various MTU/MRU/MRRU combinations to no avail. I feel like it could be MTU related… tried 1392, 1400, 1420, 1440, 1450, 1460 -.-

I’m also not averse to trying out L2TP/SSTP, but those simply are not connecting (at least on PureVPN servers)

sigh, looks like it was that silly fasttrack-connections-by-default firewall rule :\

Disabling it fixes it, but using “Routing Mark: ! VPN” to exclude VPN packets from that rule does NOT fix it. I will continue to tinker