DNS Nameservers Content Filtering

As of spring 2017, the Crossroads network is using Norton ConnectSafe's anti-malware and anti-porn DNS service

Not anymore, they're ending it November 2018. 

We're switching to https://www.security.neustar/digital-performance/dns-services/recursive-dns 

We'll start with Family Secure: 

For families that want to ensure children don’t have access to mature content. Includes Threat Protection  (Malware, Ransomware, Spyware & Phishing.) + Gambling, Pornography, Violence & Hate/Discrimination.

156.154.70.3

156.154.71.3

This is configured on each of the two Windows servers via DNS Manager -> right-click on the server itself -> Properties:

Then select the Forwarders tab:

It's OK if it can't resolve the FQDN.