I'm pretty sure I'm already onto something here but I wont be sure until tomorrow.

I'm not sure how the dual WAN scenario will play out though. Theres alot of levels of NAT going on here.

I noticed that VZ already NAT's my phone becaue it picks up a 10.X.X.X address.
PDANet will NAT the laptop.
Internet connection sharing will then put pfsense behind another NAT
and finally pfsense will be NAT'ing for the pc's

Your head spinning yet?

Cool. Thanks.  I'm on my phone so I'm kind of just skimming over this but it looks helpful.  Ill read over it again tomorrow.  Ill add you to steam too.  If you have time tomorrow while we'really working on this and want to sit in or offer any suggestions for troubleshooting I can setup any appropriate remote connections.  Who knows...  the more heads we can get in this the better chance we have at solving a problem that could benefit the comminty as a whole.

My biggest fear is that it just works and we have nothing to fix.  Then we have to intelligently break something....  but we'll see I guess..

Going to test a Stinksys router with DDWRT.  Will post results.

Well... in order to change routers I've always had to call up support and get them to break the DHCP lease.  I assume its tied to the MAC address of the router, but even spoofing the MAC on the DDWRT router didnt help.  It refuses to pull a WAN IP unless you call support.  I sat on the phone on hold  90% of the time with FiOS support for 40 minutes and eventually was hung up on.  I've made that call lots of times but for some reason I must not have had good luck.  So we never tested the DDWRT router.  :(

We got the dual WAN's setup, but couldnt get a stable enough connection even for web traffic.  3G signal at my house isnt very good.  I dont know what else to try to do for a Dual WAN.  I wish there was something I could install in pfsense that could tether straight to from my phone rather than adding another level of complication to it.

After we switched to Automatic Outbound NAT, the Public interface was communicating on random outbound ports  and we recieved no errors for anything at all.  No Punkbuster errors either. 

We kind of got bored and thought it would be a good idea to play with the one model rocket I had.  And then after not retrieving it on a windy day when I'm sure it ended up in the next town, we TRIED to make a rocket out of an empty Corona bottle.  When that endeavour failed we decided to light off a rocket engine with no rocket.  Those are gonna make for funny YouTube videos.

I have pcaps and pfsense was sending all firewall logs to a syslog server that has a webadmin.  I might try to go through those on another day.

I was hoping that it wouldnt work so we had something to try to fix.  Unfortunately it did.  I only have one copy of BF3 so testing it again will have to wait for another time more people are over.  We have a spare Steam account for our group, but havent gotten around to a spare Origin account yet.  I should have jumped on that when BF3 was half off this past week.

Sorry I couldnt find more :(  Maybe the pcaps/logs will offer some more insight. 

*EDIT*

Also looking at vG's BF3 server through TCAdmin, it has an option to delete the PB Screenshots and Logs.  I can look at screenshots, but I dont see a way to look at PB logs.  I can look at the server logs, but I'm not sure if anything relevant will be in there.  Are the servers you guys were running still up?  Would it be possible to get those PB logs?

The other two were donated by me

Will be more than happy to do it again for next year if BF3 is a tourny game!