Thank you.

If the servers do not support DNSSEC, then yes, you'll have to disable DNSSEC in addition to enabling forwarding mode in the resolver. Given how OpenDNS manipulates record results to perform its filtering, it's no surprise they don't support DNSSEC.

facing problem with streaming site like showbox, netflix or other movies site
i  used https://www.downloadwab.com/download-revo-uninstaller-pro/
and also http://filehippo.com/download_bitdefender/
but still facing the issue

What were the routes you measured or which interfaces were laptop and server hanging of during measure? Can it be you measured one with routing and the other without?

@Derelict:

No matter what, pfSense captive portal will not pass IPv6. It will be IPv4-only.

Then it's solved. I'll have to use iptables to filter MAC addresses and abandon pfSense.

I disabled the VPN NAT Rules, the VPN interface and the VPN itself.  After this the speed test results varied from 250 to 300Mbps.  Looks like the VPN has something to do with the slow speeds, even the sites that weren't using the VPN.

It occurred to me that I recently updated from 2.3.4 to 2.3.4-1.  I might not have noticed the slow speeds until this latest mess with comcast.  If the slow speed was only on the VPN I might think it is a problem with the VPN server, but that seems unlikely given the effect on non-VPN sites.

Could something have happened with the VPN client during the upgrade?

If so, can I download or update the VPN client?

Is it not possible?

You need to look for anything that indicates it restarted.

No. Uptime is time since it was booted.

Thanks johnpoz. Besides naming conflicts with other devices, does domain name defined in pfSense have any consequence to DNS on subnetworks. I am still not sure why the firewall has a domain name definition.

I am not doing any HTTPS traffic inspection. I will check, but I'm pretty sure that wouldn't be turned on as default.

It turns out, the phone didn't have net connection. It uses cell when it says "Connected, no internet". Once I put it into airplane mode and turned WiFi on, it wouldn't pull up any pages. Oddly enough, it let Hangout messages and Allo messages through.

That still doesn't explain why my laptop worked fine.

The other thing I noticed is that the firewall isn't logging any packets from my laptop as allowed or denied. I have turned logging on for all the rules that I'm trying to follow on the log. Another thing, the when the log does show any action from my laptop, it's usually just the web portal itself. Not any page requests.

I have gone to my wits end with pfSense. Need some sort of help Please

Yes I can see now that I was in a double nat scenario. Will change that. Thanks y'all for your feeback. Much appreciated!

you can change the bootloader/menu timeout

https://forum.pfsense.org/index.php?topic=133220

Solved:
Debian Bug with not reading the interface config correct.