add timeout to DNS forwarding