We recommend that all DNS is redirected to DNSWatch.  This is best accomplished through a firewall.  By routing all port 53 traffic to DNSWatch it will force protection of all users.