Related thread in the old 2.0RC forum: http://forum.pfsense.org/index.php/topic,40119.0.html
Looking at /tmp/rules.debug, WAN/LAN rules are processed before Interface Groups rules.
Is this expected? Why are the WAN/LAN interfaces treated differently from other interfaces?