* switch all safesearch providers to dynamic ips (derived from cname) * made the new safesearch approach compatible with bind-nslookup * removed 3.x config compatibility code Signed-off-by: Dirk Brenken <dev@brenken.org>