dnsforward: add timeout option