Which offers a solution in the DNS resolution level from one domain to
another using CNAME records.
The basic example would be:
The restrict.youtube.com host/service requires the destinations to be
legal ie not the CNAME itself.
This is a basc DNS based solution and I was wondering about a solution for this.
For now the real solution I have found was to install a local BIND
which forwards the queries to an upstream caching service.
On/In the local BIND we can define using RPZ these CNAMES like the example at: