--- dns/powerdns/files/patch-pdns__dnspacket.cc	(nonexistent)
+++ dns/powerdns/files/patch-pdns__dnspacket.cc	(working copy)
@@ -0,0 +1,14 @@ 
+--- pdns/dnspacket.cc.orig	2015-11-02 11:33:21.000000000 +0100
++++ pdns/dnspacket.cc	2016-04-11 16:12:10.116338000 +0200
+@@ -642,8 +642,9 @@ bool checkForCorrectTSIG(const DNSPacket
+ 
+   q->getTSIGDetails(trc, keyname, &message);
+   uint64_t now = time(0);
+-  if(abs(trc->d_time - now) > trc->d_fudge) {
+-    L<<Logger::Error<<"Packet for '"<<q->qdomain<<"' denied: TSIG (key '"<<*keyname<<"') time delta "<< abs(trc->d_time - now)<<" > 'fudge' "<<trc->d_fudge<<endl;
++  uint64_t diff = trc->d_time >= now ? trc->d_time - now : now - trc->d_time;
++  if(diff > trc->d_fudge) {
++    L<<Logger::Error<<"Packet for '"<<q->qdomain<<"' denied: TSIG (key '"<<*keyname<<"') time delta "<<diff<<" > 'fudge' "<<trc->d_fudge<<endl;
+     return false;
+   }
+