hi knuxed, which means,
what you are trying to achieve is
internet -> mikrotik -> Non-VPN -> everything (ddns will update your connected WAN ip address)
and
internet -> mikrotik -> VPN -> Apple TV
yeap, you can do it, 1st need to create the VPN client in the Mikrotik (i personally used PPTP for speed, and i have pretty much same setup like u, except i connected to a few VPN at the same time)
once you created the VPN, masquerade this VPN just like the usual way to Masquerade your internet connection,
then add a routing rules with cost more than 1, maybe 10 or 100
then create Mangle rules to mark your connection, this way you can do a "policy routing/selective routing" that only applies to your Apple TV.
a better example will be here:
http://mikrotikacademy.blogspot.com/2013/0...uting-with.htmlhttp://wiki.mikrotik.com/wiki/Policy_Base_Routinghope that helps...