In my last round of my linux firewall comparison I liked opnsense very much:
not affiliated, I just liked it. However the GUI is made of many php scripts (if they did not change meanwhile) - so it would be great if many more eyes would like to take a look at the code...