I’m experimenting with Zerigo’s DNS service some more, and only writing this post to make note of the afxr configuration options for NSD3:

    provide-xfr: 68.71.141.22/32 NOKEY
    provide-xfr: 174.36.24.251/32 NOKEY