I'm a big fan of controlling things like content filtering directly on my own box, but for some people who for whatever reason want to be able to filter content but have small processor and ram so can't afford to run packages:
There is a way to have content filtered by a dns server before it hits your pfsense.
This is the process roughly.
Feel free to clean it up and post a friendlier version if you like.
On this topic, to get further blocking from the router, you can also set up a free dyndns account and then:
Set up a dynamic dns account with them. Load the dynamic dns info for your account into pfsense's dynamic dns service.
After that, on the dyndns website, set up your "defense plan".
in the defense plan check off the blocks for the sorts of things you don't want kids to be able to access, like porn or whatever.
Then go into general > setup
put the dns setting for dyndns into DNS servers list. For dyndns its 220.127.116.11 and 18.104.22.168
Also un-check the "Allow DNS server list to be overridden by DHCP/PPP on WAN" box to allow your settings to take effect on all computers on your LANs.
dyndns uses barracuda filtering for dns, so it should make a good compliment to a system running squid and dansguardian or for people who have systems with not enough processor for those things.
There. Now you have content filtering by barracuda on your PFsense and everything attached to it (presuming they don't modify their computer's DNS settings by hand to circumvent). Can be used in tandem with squid and Dansguardian to give more fail safe protection.
You can then go to this site to see if this is working for all your computers:http://dyn.com/support/internet-guide-setup/
(I decided its best to list only 22.214.171.124 and 126.96.36.199 in the general config for this to work well because even if the google servers are listed below the dyndns servers, if google resolves even ever so slightly faster on occasion, it will bypass your filtering. So, make sure that 188.8.131.52 and 184.108.40.206 are the only servers you list if you intend to go with dyndns.)