RB5009 and what seems like DNS problems

RouterOS Beginner Basics
1

Hi folks,

my RB5009 is running really good, there is juuuust a small problem that gets really annoying. And I would guess it’s kind of a DNS problem but I’m not sure.
Maybe someone of you has an idea.

Best examples are paypal.com, NVidia GeForce Experience or twitch.tv
Most of the time when I log into paypal, the login screen stays white and keeps loading and loading. If I wait a bit and reload it works.
With the NVidia Experience same thing. You must login directly after starting the tool and the login screen keeps just black.
Same in twitch. Every channel I click into keeps white.

If I, for example connect via our company vpn over the rb5009 and try the above, the login screens work straight away.
So at first I thought “maybe a firewall problem”, but the fact that it works after reloading keeps me off of that.
Second thought was “maybe a routing problem”, but the router is using a PPPoE DSLite DSL connecting to the WAN, so I don’t manage any routes except for my internal vlans. And those interfaces are all on the rb5009 so directly connected.
Third thought “maybe he can’t resolve a needed DNS entry, or he doesn’t get it in time and after the reload he can resolve it”
But I don’t see any misconfig here … and are a bit off of ideas.

Maybe someone has an idea where to look for that error?

Flo
config2407.rsc (13 KB)

2

/export file=anynameyouwish ( minus router serial number, public WANIP information, keys etc.)

3

Added the config to the original post.

4

Hmm I see you are allowing ISP DNS usage!

/interface pppoe-client
add add-default-route=yes allow=pap,chap,mschap2 disabled=no interface=
ether1_WAN name=pppoe-1und1 use-peer-dns=yes user=
Hxxxxxx/xxxxxxxx@online.de

So try disabling all your current IP DNS settings and see if the performance improves!
/ip dns
disabled-=yes set allow-remote-requests=yes cache-size=1024KiB max-concurrent-queries=200
max-concurrent-tcp-sessions=60 servers=
1.1.1.1,1.0.0.1,2606:4700:4700::1111,2606:4700:4700::1001

Then try the reverse… enable the IP DNS settings and set ISP DNS setting to NO.

5

Hmm, no matter which option of the two I use…it doesn’t work.

What else could it be?
The firewall settings in v4 and v6 are the stock settings + some I added for SIP voip phones. But that is all.
Does, for example, twitch.tv work with the firewall standard settings?