diff --git a/src/opnsense/scripts/proxy/setup.sh b/src/opnsense/scripts/proxy/setup.sh
index 9b43741fc..0ac95e624 100755
--- a/src/opnsense/scripts/proxy/setup.sh
+++ b/src/opnsense/scripts/proxy/setup.sh
@@ -37,3 +37,8 @@ fi
 
 # generate SSL bump certificate
 /usr/local/opnsense/scripts/proxy/generate_cert.php > /dev/null 2>&1
+
+# on bootup, wait some time before executing squid. For some reason ipfw might interfere with squid startup
+if [ -f /var/run/booting ]; then
+   sleep 2
+fi