pfSense captive portal SSL mode

My mistake...my Wifi interfaces are bridged to eth0.x interfaces and not the LAN interface.

It seems I need to use the localize-queries option in DNSmasq to solve my problem.