Today, we released version 4.1.22 of the authoritative DNS name server NSD.
This release fixes a bug where zone transfers would not succeed, because of an error in the selective NSEC3 allocation (introduced in 4.1.18).
The refuse ANY query feature now sends truncated answers over UDP and allows TCP queries. This is the same size response on UDP as the refusal but allows the query to succeed over TCP for genuine queriers that fallback to that transport mechanism.
The release contains a speed up for TCP processing that should NSD better at handling large numbers of incoming TCP connections.
You can get source packages of this version from the downloads page.