Firewall/NAT

hello,

have the monowall Intrusion Detections?

best regards
harald

No, m0n0wall is a L2-L4 firewall/router designed for embedded hardware, which generally don't have the resources to be a full blown IDS. That's something that requires much more CPU and RAM than available on such platforms.

Check out pfsense if you are looking for something like snort.

Or build a IDS (snort or something) box and span it with the external port of your firewall.  Making a single point of failure, putting all your eggs in one basket, and expecting your firewall to be a Swiss Army Knife network appliance is dangerous if not simply foolish.

Or build a IDS (snort or something) box and span it with the external port of your firewall.  Making a single point of failure, putting all your eggs in one basket, and expecting your firewall to be a Swiss Army Knife network appliance is dangerous if not simply foolish.

I don't see how including IDS functionality within your firewall has anything to do with it being a single point of failure.  If you have a single firewall at your perimeter, it IS a single point of failure.  Lack of added services does not change that fact.