Comment by cullumsmith

I run a local DNS server that has its own blocklists, internal DNS records, etc. I imagine most people who might bother to deploy an enterprise browser policy do something similar.