DNS over TLS to cloudflare NAT rule issue

[jc1976]

Hello all! I have a really odd issue with DNS resolution duckduckgo.

I use duckduckgo for web searching in firefox and Edge.
My dns is setup as the usual 127.0.0.1, 1111, 1001.
I followed the netgate instructions to force all queries to go to cloudflare via NAT rule, because i use DNS over TLS (again, following netgates configuration instructions precisely).

on many if not most searches using duckduckgo it returns an error stating that theres an internet connection issue blah blah... however, if i do the same search under google, i have no issues whatsoever.

all software for pfsense is the latest stable version (no betas), and i've disabled DoH in firefox to ensure that all resolving occurs via
unbound.

Any thoughts/Ideas?

Thanks!