pfSense » pfSense Packages

To effectively remove packages you have to delete the .xml file(s) in "/usr/local/pkg", this seems to be a problem with all packages on embedded too when a package fails to install tested on 2.0-BETA4-4g-20101014-0217-nanobsd.

Another problem with Squidguard is it uses /var/ for storing the blacklists, on embedded it gets lost on a reboot plus it has a limited space, which breaks the whole system in case there's not enough, I think this can be fixed by recompiling Squidguard with some custom dir options.

The only alternative to using /var is to keep the CF mounted read write all the time, which eliminates the purpose of running embedded. That's just not a good thing to run on an embedded system if you're trying to do all that. In some configurations it's ok, yours doesn't sound like one of them.

No need to make the CF mounted read/write all the time just to extract the Squidguard blacklists, why not to mount RW for extraction, then RO again? I think it's better in all embedded configurations to store it on a permanent directory away from /var/, The current shallalist is about 35mb, having a list once is better than none at all.

squidGuard.conf contains the option "dbhome" which defines where blacklists are located, the default path is /usr/local/squidGuard/db. Maybe modifying this will solve the issues on embedded.