Fixes

• If a per-resource timeout is configured, it was not used correctly in case of refreshes. Refreshes are knocks while a previous knock-open is still active. In this case the global timeout was used instead. This has been fixed.
• Build on Android/Termux is now possible again with --no-default-features --features cli,libc-resolver.
• Handling of various DoS scenarios has been improved.

New features

• The libc resolver is now an alternative to hickory-resolver. hickory-resolver is still the default. libc-resolver can be enabled via build features.
• Seccomp rules have been refined.
• Error reporting in case of configuration file syntax errors has been improved.

Breaking changes

• Resource port 0 is no longer allowed. It is reserved by the operating system and it makes no sense to knock it open. It will now be rejected by the configuration parser. Remove such entries from your configuration.