Like every other website on the planet, SmallNetBuilder uses cookies. Our cookies track login status, but we only allow admins to log in anyway, so those don't apply to you. Any other cookies you pick up during your visit come from advertisers, which we don't control.
If you continue to use the site, you agree to tolerate our use of cookies. Thank you!

Router Charts

Click for Router Charts

Router Ranker

Click for Router Ranker

NAS Charts

Click for NAS Charts

NAS Ranker

Click for NAS Ranker

More Tools

Click for More Tools

LAN & WAN Reviews

Basic m0n0wall Configuration

m0n0wall has a very simple, but easy to use Web interface for configuration. The screen shots and examples that follow are based on m0n0wall on the Soekris net4501, but are applicable to all the m0n0wall images.

Enter the m0n0wall IP address into the Address box of your web browser and you will be prompted for a Userid and Password. Enter the defaults are admin and mono (both lowercase, no numbers) and you'll be then taken straight to the Status page (Figure 1).

m0n0wall Status page

Figure 1: m0n0wall Status page

The web GUI has a simple layout with all configuration options and features grouped and listed in a pane down the left side of the page and the details of the selected option are displayed in a large pane on the right side of the page.

As with most firewalls, m0n0wall offers a certain amount of security in its default configuration. The important defaults are:


  • The WAN interface is configured to get its IP configuration by DHCP. 
  • Traffic entering on the LAN interface is allowed to pass to any other interface, WAN and optional interfaces.
  • Outbound NAT is enabled; all outbound traffic passing through the WAN interface appears as if it originated from the WAN IP address.
  • Inbound traffic entering on the WAN interface is blocked.


  • Web administration is allowed on the LAN interface IP (default on port 80 (http).
  • The DHCP service is enabled on the LAN interface so that PCs are correctly configured with an IP address in the - 199 range. The DNS forwarder service is enabled allowing PCs connecting to the LAN interface to use the LAN IP address as a DNS server. Queries are forwarded to the DNS servers, statically configured or obtained by DHCP / PPP, on the WAN interface.
  • The firewall's time zone is set to Etc/UTC and synchronises its internal clock every 5 hours with one of the time servers at 1 .

Under most circumstances, this is enough to give a small network of PCs and other Ethernet devices using TCP/IP protected access to the Internet. All other features and services are disabled.

1 is a voluntary project providing public Network Time Servers. The project uses 'Round Robin' DNS to spread the load of time requests over a large number of servers, currently 188.

More LAN & WAN

Wi-Fi System Tools
Check out our Wi-Fi System Charts, Ranker and Finder!

Support Us!

If you like what we do and want to thank us, just buy something on Amazon. We'll get a small commission on anything you buy. Thanks!

Over In The Forums

Hey SNB members, I hope you are all well during this time. I have used Asus routers for a long time. My current and backup router have failed - so I d...
v2.5.1 Updated 2020-05-10 Run an NTP server for your network. Graphs available for NTP accuracy on the Addons page of the WebUI.Inspired by kvic's p...
Hi there,This thread is about GNUton's Merlin builds for DSL devices.* A few words about how this project started:Some days back I bought a DSL-AC68U....
Hi all, I have been considering upgrading the home network primarily as it pertains to security. With the implementation of many IoT devices which wil...
I updated my ISP from 200 to 400 Mbps. So I tested the throughput, the ISP Modem is putting out 467 Mbps. I am testing using an ethernet cable directl...

Don't Miss These

  • 1
  • 2
  • 3