cscvs to tla changeset 14

[autodns.git] / autodns.conf

diff --git a/autodns.conf b/autodns.conf
index b320c27de9dbbcdb6e53b5b37f9bd0ad09e2edad..56e09f811cbc515628de71495675687200f0649b 100644 (file)
--- a/autodns.conf
+++ b/autodns.conf
@@ -29,3 +29,9 @@ $lockfile="/etc/bind/autodns.lck";
 
 # The command to reload the nameserver domains list.
 $reload_command="sudo ndc reconfig 2>&1";
+
+# When we consider a signature to have expired and so to be rejected.
+# Intended to help prevent reply attacks. Value is in seconds and the 
+# signature can be +/- this many seconds from current time before being
+# rejected.
+$expiry = 7200;