You must have a restrictive ruleset on LAN then. Previously, the "anti-lockout" rule would have allowed that DNS traffic because it allowed anything to hit the pfSense LAN IP, but now that is not the case.
As for the gateway selection, it works fine for me with FF 4.0.1, there may have been something in the browser cache that needed cleared.