I have setup a static DNS entry to force google.com to forcesafesearch.google.com's IP address. I used this approach since the UTM does not support CNAME records, and this is a Google documented way to force users to safe searches.
This is working fine, and all internal users are locked into safe search -- problem is that this has completely broken YouTube. I think it is related to YouTube.com being a CNAME to a google.com address. Whenever I try to go to YouTube, I get an "DNS_PROBE_FINISHED_NXDOMAIN" error.
I added youtube.com as an additional hostname in the static DNS setting for google.com, but it still does not work. Once I delete the static google.com entry it works again. Odd. Cannot seem to find anything on the web to support this configuration.
This thread was automatically locked due to age.