you can but if you want to keep the camera's in the same vlan/subnet as the dvr then it would be a lot harder (you would have to hairpin on the pfsense box, etc). I would just change your dvr to 10.0.1.x and call it a day. if you really wanted to be a little more secure, you can then modify...