Well no, like I said. I don't know if I should just leave it bridged or if I need the wi-fi on a subnet etc.
Edit: Righty, wireless OPT interface is now on 192.168.3.1. LAN is on 192.168.0.1. I've added a firewall rule and whammo, it works. I'm on the web from a wireless client. But, er, what happened to the captive portal? It's turned on allegedly…
Edit2: Ah, just needed to kill it and restart. It works. Yipee!