With IPv6 coming, it makes less and less sense to use pfSense in the default NAT/router mode.  If you have enough public IPs, it makes much more sense to set it up as a transparent firewall.

Here is a good guide on how to do that