General Questions

I have a small collection of filter and NAT rules that work well until I enable the captive portal.  As soon as I do, the affected ports go from open to filtered when nmap'ed from the outside.  Disabling captive portal reverts to the working state with total consistency.  I see this behavior on 1.231 and 1.3b2, both on generic-pc.  Is this broken or expected behavior?  If the latter, what might I be missing?

probably the reply traffic getting blocked by the captive portal, you'll have to exempt hosts that have inbound NAT entries.