The only thing holding me back from switching to OPNsense is the lack of pfblockerNG. To the best of my knowledge, there is no competing package available at the time.