Use the ipfw(4) list functionality to reduce rules even more. Add allow rules for accessing pfSense webgui to not lock out operators behind the CP. Remove redundant rule regarding dns. Probably every dns request should be forwarded to the local dns server to not force clients to use the pfSense forwarder!
Use the ipfw(4) list functionality to reduce rules even more. Add allow rules for accessing pfSense webgui to not lock out operators behind the CP. Remove redundant rule regarding dns. Probably every dns request should be forwarded to the local dns server to not force clients to use the pfSense forwarder!

ch1c4um/pfsense,jxmx/pfsense,phil-davis/pfsense,ch1c4um/pfsense,dennypage/pfsense,pfsense/pfsense,ptorsten/pfsense,ch1c4um/pfsense,BlackstarGroup/pfsense,jxmx/pfsense,ptorsten/pfsense,dennypage/pfsense,pfsense/pfsense,phil-davis/pfsense,brunostein/pfsense,NewEraCracker/pfsense,ptorsten/pfsense,NOYB/pfsense,brunostein/pfsense,brunostein/pfsense,NewEraCracker/pfsense,NewEraCracker/pfsense,pfsense/pfsense,ch1c4um/pfsense,BlackstarGroup/pfsense,phil-davis/pfsense,BlackstarGroup/pfsense,NOYB/pfsense,NOYB/pfsense,jxmx/pfsense,NewEraCracker/pfsense,phil-davis/pfsense,pfsense/pfsense,BlackstarGroup/pfsense,dennypage/pfsense,dennypage/pfsense