I google it and following many guides. I still cannot make it to work.

WAN - phy.interface DHCP (vSwitch0) Accepted Promiscuous Mode
LAN - phy.inferface  NONE (vSwitch1) Accepted Promiscuous Mode

my goal is bridge WAN and LAN but filtering (like Untangle's Bridge Mode)

WAN and LAN -> Bridge
OPT1 -> Bridge0 ( no idea how to use it)
net.link.bridge.pfil_bridge = 1
firewall WAN (all *) for now
firewall LAN (all *) for now

The computer on vSwitch1. no DHCP, no Internet even set a static IP. basically, nothing.

I want the computer on vSwitch1 can communicate with Domain controller, DHCP, DNS and incoming TCP/80 port on the WAN interface

Enterprise Network installed with DC, DHCP, DNS servers etc –--> pfSense Bridge (filtering TCP80) -> Virtual Web Server (this server have to communicate with DC, DHCP and DNS)

I am thinking that work around.

WAN phy.interface DHCP
LAN phy.interface set up as NAT and port forward all the necessary ports

Enterprise Network installed with DC, DHCP, DNS servers etc ----> pfSense NAT (filtering and port forwarding) -> Virtual Web Server (this server have to communicate with DC, DHCP and DNS)

any help?