Reply to thread

Message

<blockquote data-quote="ForgottenSeer 58943" data-source="post: 683118">I&#039;m trying to get to the bottom of how Heimdal Pro works.We know it inserts a loopback into the IPv4 settings on each computer of 127.7.7.3. I assumed this looped back DNS to the Heimdal local DNS Client running when it is installed. Which it appears to do, but it then hands it off to the normal DNS on your firewall/router or DNS server. I originally thought at that point Heimdal simply acted as a local DNS proxy and took it from there.Now I am starting to understand that Heimdal loops back to it&#039;s local database for validity checks, then forwards to the normal system DNS. Otherwise my local Pi-Hole DNS wouldn&#039;t be seeing DNS requests from machines when Heimdal is running, but it is. This leads me to think Heimdal is a good bit more sophisticated than I thought and is doing addition things other than a simplistic DNS Client/Cache or Blacklist forwarder.Also this is good news, as it means it is an additional layer over my local Pi-Hole DNS w/DNSSEQ, Caching and curated blacklists. So installing Heimdal doesn&#039;t blow out a crucial security layer of mine.</blockquote>

[QUOTE="ForgottenSeer 58943, post: 683118"] I'm trying to get to the bottom of how Heimdal Pro works. We know it inserts a loopback into the IPv4 settings on each computer of 127.7.7.3. I assumed this looped back DNS to the Heimdal local DNS Client running when it is installed. Which it appears to do, but it then hands it off to the normal DNS on your firewall/router or DNS server. I originally thought at that point Heimdal simply acted as a local DNS proxy and took it from there. Now I am starting to understand that Heimdal loops back to it's local database for validity checks, then forwards to the normal system DNS. Otherwise my local Pi-Hole DNS wouldn't be seeing DNS requests from machines when Heimdal is running, but it is. This leads me to think Heimdal is a good bit more sophisticated than I thought and is doing addition things other than a simplistic DNS Client/Cache or Blacklist forwarder. Also this is good news, as it means it is an additional layer over my local Pi-Hole DNS w/DNSSEQ, Caching and curated blacklists. So installing Heimdal doesn't blow out a crucial security layer of mine. [/QUOTE]

Verification