Thanks Colin,
No change to Merlin, worse security, noted. No, not using any VPN.
Yes, that's the Asus FW I am on.
1. Yes. No import.
2. OK, trying that.
The WAN DNS is , or should be, dynamically updated by ISP, but I can try those for a while. The WAN is Automatic, neither PPOE or PPTP or...