Invalid section main/net
Move freeradius and dhcp to recommends, add new isc-dhcp-server alternative (new name), ca-certificate as pre-depends looks very suspicious
packetfence-pfcmd-suid contains compiled code, enable shlibs
postrm shouldn't fail if init script missing (ie: half-installed)
Move snort/suricata to recommends as its not mandatory