Yeah, I saw the timer stuff and have changed that. This is all coming up rather nicely…transparent Squid proxy, DHCP configured, etc. Just need to figure out the VPN connection to work (didn't realise when I started all this that pfSense doesn't do L2TP/IPSec, which is a litle disappointing) and sort out some interface bridging and we should be all set...impressed with pfSense now, seems much nicer to use than OpenWRT, helped along by better hardware (the WRT54G while iconic, isn't particularly well-specced).