Not sure this was the right way to fix it but what worked for me was:

ln -s /usr/local/lib/mysql/libmysqlclient.so.18 /lib/libmysqlclient.so.18

Result:

ldd /usr/local/bin/barnyard2 /usr/local/bin/barnyard2:         libmysqlclient.so.18 => /lib/libmysqlclient.so.18 (0x280d8000)         libz.so.5 => /lib/libz.so.5 (0x283e7000)         libpcap.so.7 => /lib/libpcap.so.7 (0x283f9000)         libm.so.5 => /lib/libm.so.5 (0x28427000)         libc.so.7 => /lib/libc.so.7 (0x28441000)         libstdc++.so.6 => /usr/lib/libstdc++.so.6 (0x2854a000)         libgcc_s.so.1 => /lib/libgcc_s.so.1 (0x2863e000)         libthr.so.3 => /lib/libthr.so.3 (0x28649000)

Both snort and barnyard2 start on reboot. (The symlink persists on reboot, so barnyard2 starts normally.)

I don't know how permanent this fix is. I've always had some kind of issue with barnyard2 since pfSense v1.x. I will keep my eye on it, probably with a cron job.

Hope this helps.

Update: I also had to update the sensor.last_cid value or barnyard2 would die with a fatal error about that table and field, complaining about duplicate values in a unique primary key field? Something like that.

At first I tried a value that was 1 greater than the largest value in event.cid but that choked, and barnyard2 died again – same error, just different field value reported as duplicate.

What did work was I decided to add 10 to the highest value from event.cid to update sensor.last_cid value.

Warning: Your mileage may vary with these hackish fixes.

Yeah, OK now… TY!  8)

Limitation by traffic not supported in proxy. Try to use CaptivePortal & Radius

Also, by my oppinion if you have unlimited internet tarif good idea bandwidth limitation per host.

@apple5:

you can try listening socket IP address and port $WAN:443

???

This thread - http://forum.pfsense.org/index.php/topic,66357.0.html - has some advice about how to cleanup package binaries and their startup scripts after doing a factory reset of the config.

pfSense 2.1 is based on FreeBSD 8.3 and uses the PBI package system for the add-on packages.

And there are probably package start/stop scripts in /usr/local/etc/rc.d

[2.1-RC2][root]/usr/local/etc/rc.d(14): ls -l -rwxr-xr-x  1 root  wheel  1311 Sep 10 07:12 bandwidthd.sh -rwxr-xr-x  1 root  wheel  325 Sep  9 09:42 cron.sh

The pfSense bootup will be trying to execute each of these to start the corresponding package/daemon. Deleting these will stop that happening.
The factory default config will have got rid of the GUI menu entries for any packages. And after doing pkg_delete as suggested by JimP you "should" be back to the base system. But there might be other remnants of some packages - as JimP says, a full wipe/reinstall is the way to be sure.

It would appear that all is well.  I halted the system waited 30 seconds powered it back on an were a go.  Everything came up.  Guess I will live with it for now.  Hope they fix the problem with it installing the additional package when its not needed.

Is there a place I should post this as a bug to let the SG or Squid package makes know?

Thanks again for all the help.

DrClaw

I have added checks for this in the code, since people do this/report this quite often. It is easy enough for the code generating the config to not put the same subnet spec into the config twice.
https://github.com/pfsense/pfsense-packages/pull/482

another way is check these settings:

Bypass proxy for Private Address Space (RFC 1918) destination

Disable X-Forward

Disable VIA

Suppress Squid Version

(then restart squid and try it)

(basically I think apple is being fussy because squid was tattling on its self.  This should fix that, if its the issue.  Thats just a thought - I've not tested it specifically to see how it effects iPhone)

Hi,
it does not work with eg: google.com on squid GUI. squid GUI only allows IP addresses or aliases.

Aliases can be created on pfsense FIREWALL –> Alias
So if you want to bypass a website like www.google.com you need to find out the IP addresses or subnets google.com uses. Then you put these IP addreses into an alias and put this alias into squid GUI.

I am not 100% sure but you can use google.com in a "Host" alias which then resolvs all IP addresses in the background. This alias can also be place on squid GUI.

HINT:
google.com does not resolve IP addresses for maps.google.com. So you need to put all domains and subdomains into this alias you need.

Could you post a screen of your config?

不用谢.  留神. ;)

Hi,

you should start with this. It explains the basics, what to configure and what to test:
http://doc.pfsense.org/index.php/FreeRADIUS_2.x_package

@lpallard:

but Im WONDERING!  Quite different.

I am wondering as well… if all the people wondering about all the borkage started nagging upstream directly about their obviously untested uberparanoid rules, would that fix something or is this just a completely lost cause.  ??? :-\ I wouldn't bet a dime on the commercial rulesets being any better.

Yeah, but that won't solve the real issue.