Pi-hole and heuristic malware detection

There shouldn't be any issues. The DNS lookup still happens, but for blocked domains the query returns the IP of the Pi-hole instead of the actual IP from the record. So the heuristics would still see the query happen. I'm not sure if that is part of the detection process, but if it were there would be no interference caused by using Pi-hole as your DNS server.

1 Like