Dns Safety is supposed to be deployed within your network. IP address of the Dns Safety machine shall be set as Primary DNS on all clients within the network. DNS requests from the clients will now be sent to Dns Safety machine which will first filter them and then forward to internal servers or public DNS upstreams.
The following diagram illustrates typical deployment in a small Active Directory integrated network. Deployment in home network is even simpler.