Sorry, I overlooked that part.  That was just an example, I have three search domains I need.

Was there ever a solution found to this, because I'm having the same issue?

DHCP is on ports 67 and 68

Thanks :) I have choose the static IP solution.

Fixed/Solved.

Was a series of comedy of errors.

Had to use a console on FreeBSD server, a console on pfsense, and web access to pfsense.

in pfsense shut-off DHCP server while there also removed static DHCP to 192.168.34.50 with bogus MAC to act as a placeholder. 
This was first error.  ARP picked up address and showed in ARP table, but obviously it was linked to the wrong MAC address. cleaned out the ARP cache or reboot on pfsense arp -a on FreeBSD shows pfsense gateway ping to pfsense works arp on pfsense now shows 192.168.34.50 mapped to correct MAC address !! ping to FreeBSD still not working ?
8.) FreeBSD firewall rule drops (blocks) packets instead of reject.  Hence no ping.  Duh! Sort of error #2 (mental error?)
Adjust firewall rules for testing.  Reset. Ok, now what about ssh into FreeBSd from pfsense console?  Nope - reject.  So its getting a response of sorts. Error #3 - FreeBSD ssh config was set to only listen on old address of server, not 192.168.34.50.  Fixed. Now have ssh access from pfsense console to FreeBSd server. Now what about original endpoint - WAN access to webserver 192.168.34.51? Yup.

Thanks for pointing to arp to help trouble-shoot this.

Peter

thx. that works perfect. exactly what i was looking for.

as ns0.thepiratebay.org probably will not answer DNS requests from anyone anyhow.

I doubt they would do recursive, but yeah they are going to answer for records in thepiratebay.org domain - its an authoritative server for that zone.  It better answer for it.

You you prob need .se, because thebay.org redirects to .se domain

Yeah I see right there in dhcp problems

Also note that each time a new VM is created it’s assigned a new hardware address. You can change hardware address manually on the Advanced tab of VM Network Adapter Configuration should you need to do so.

If you wireless card does not allow promiscuous, use of other macs - then use a different wireless card, or use a wire.

Wouldn't another option just to set static IP?  Or use Natted connection under VM software vs bridged.

OK, thanks to your answer now I get it! I made an error in the "host" part –- oops

Again, thank you sir!

@pilgrim87:

how could i run a packet capture to see what's in it?

Diagnostics / Packet capture
Set 'interface' to the appropriate entry

The resulting .cap file can be analysed quite nicely with Wireshark

My money is on a cheap NIC. I've seen some <$3 cards with completely fabricated MAC addresses, and often the whole batch will have the same address!

Also it could be a legitimate NIC that's cr@pped-out the firmware.  Have also seen this (when someone put the card in the PCI slot the wrong way round!!!) - Different MAC addresses in Windows driver  than was showing in Wireshark - needless to say the card didn't work.

So if the machine was setup static there would be no releasing of anything.

So do you really mean that you want your machine to always get the same IP from pfsense?

This is called a reservation or static dhcp.  You an set them in pfsense yes.

http://doc.pfsense.org/index.php/DHCP_Server#Static_IP_Mappings

staticmappings.jpg
staticmappings.jpg_thumb

@wallabybob:

Is the content downloaded by http? If so, squid will surely be involved and will probably use its "local" DNS rather than whatever you have configured on the real client.

I don't know enough about squid operation to suggest a fix but it could be worthwhile disabling squid on pfSense, rebooting (to make sure squid is disabled) and then trying your content download.

Yup, that looks like it was the problem. Yes Hulu is delivered via HTTP. Was staring me in the face.

Anyway I am now going to test for some configuration changes and see if I can get this to work with squid. Thanks for your help Wallabybob.

@victorhooi:

The pfSense box and the Unifi AP are both plugged into the Linksys switch - those two ports have been configured as trunks. My understanding was that this would be enough, and I don't need to explicitly make it a member of each VLAN.

So how do you think your switch is going to decide which traffic to forward on a trunk port? Everything? Everything from a trunk port? If necessary read your switch manual to see if it provides an answer to this question.

I suggest you make the trunk port from the switch to pfSense a member of all the VLANs configured in the UniFi and retry your DHCP request then consult the pfSense DHCP server log (Status -> System Logs, DHCP tab) to see if the DHCP request was received and on the correct interface.

Been doing a bit of reading from this tutorial:
http://lsgondane.hubpages.com/hub/How-to-Configure-PXE-Server-on-Linux

Though it TFTP (which is obviously going to my file server where the CentOS images are located) and keeps saying can't find config files.

I know the configs I have set in pfsense are working, just can't seem to understand why it can't find the config files under /tftpboot/pxelinux.cnf/default

I mean this is the contents of that file:

default: off description: The tftp server serves files using the trivial file transfer \ protocol.  The tftp protocol is often used to boot diskless \ workstations, download configuration files to network-aware printers, \ and to start the installation process for some operating systems.

service tftp
{
socket_type = dgram
protocol = udp
wait = yes
user = root
server = /usr/sbin/in.tftpd

server_args = -s /var/lib/tftpboot # there's nodirectory there or file so! http://lsgondane.hubpages.com/hub/How-to-Configure-PXE-Server-on-Linux says:

server_args = -s /tftpboot

disable the yes command here: disable = yes above url says no:

disable = no
per_source = 11
cps = 100 2
flags = IPv4
}

OK!
@johnpoz:

553 guessing that is a typo ;)  That sure isn't a typical port.

Oops… for sure! I meant 53 of course  ;D

Thanks a lot!

So they state

Every computer or other Internet-enabled device has an address. It's made up of numbers, like a street address. Our solution is brilliantly simple. We give you an address where the content you want is available It's like moving your computer or other device without actually moving it.

Ok its just a freaking proxy service for the services they support, they just use dns to point you to the proxy is all to bypass the IP check.  Yeah this is sneaky..  So you want to got to netflix.com, their dns returns the proxy to use ;)  You hit that like the site, it proxies your connection to real site and looks like you came from where the proxy was - this is done until the IP check portion is completed.

Show us what /var/dhcpd/etc/dhcpd.conf looks like, it may have the answers.