Do they block quad9? Although I trust AT&T about as far as I can throw them, this may just be a bad config/update.