yeah, they probably capture all DNS packets (or packets with answers?) and modify them. That is more effort than a couple of lines in DNS server config. I have

yeah, they probably capture all DNS packets (or packets with answers?) and modify them. That is more effort than a couple of lines in DNS server config. I haven't thought of it because I assumed Iran already has something like this in place && I didn't consider it as a part of effort of enforcing safe search (though it is)