I like the following packages summarized below.
- pfBlockerNG: Nice firewall module for blocking based on country and customization to expand on DNSBL for extra security.
- Squid: great for proxy, blocking of malicious systems, antivirus and WEB CACHING!
- SquidGuard: Great for killing off things like Ads and other such things based on categories from a number of available blacklists.
- Suricata: Good IDS/IPS package to get community available rules for alerting as well as you can create your own custom rules.
- Lightsquid: Reporting and monitoring of your squid transparent proxy details so you can bust someone for chewing up all the bandwidth.
- Darkstat: Overall network stats tool.
Been using pfSense for over 2 years now and will never go back to basic box store manufactured routers.