In the provider field, simply fill with "ac4.nue3\", the trailing backslash is important. The Host-Uniq field must be empty.
Since blocking one AC seems to have fixed the issue, it'd be interesting to see if blocking the another one produces the same result.
The new image is here:https://pkg.opnsense.org/snapshots/OPNsense-17.7-test3-OpenSSL-vga-amd64.img.bz2Cheers,Franco
jwe, will you mark it solved? Thanks!