diff --git a/net/telemt/Makefile b/net/telemt/Makefile
index 3cfafc6dcea8..272a1599cbda 100644
--- a/net/telemt/Makefile
+++ b/net/telemt/Makefile
@@ -1,31 +1,37 @@
 PORTNAME=	telemt
 DISTVERSION=	3.5.5
 CATEGORIES=	net
 
 MAINTAINER=	vova@zote.me
 COMMENT=	MTProxy for Telegram on Rust + Tokio
 WWW=		https://github.com/telemt/telemt
 
 LICENSE=	TELEM_PL_3
 LICENSE_NAME=	TELEMT PL 3
 LICENSE_FILE=	${WRKSRC}/LICENSE
 LICENSE_PERMS=	dist-mirror dist-sell pkg-mirror pkg-sell auto-accept
 
 USES=		cargo
 
 USE_GITHUB=	yes
 USE_RC_SUBR=	${PORTNAME}
 
 USERS=		telemt
 GROUPS=		telemt
 
 PLIST_FILES=	bin/${PORTNAME} \
 		"@sample ${ETCDIR_REL}/config.toml.sample ${ETCDIR_REL}/config.toml" \
 		"@dir(telemt,telemt,0750) /var/db/${PORTNAME}"
 
 post-install:
 	@${MKDIR} ${STAGEDIR}${ETCDIR}
 	${INSTALL_DATA} ${WRKSRC}/config.toml ${STAGEDIR}${ETCDIR}/config.toml.sample
 	@${MKDIR} ${STAGEDIR}/var/db/${PORTNAME}
 
+.include <bsd.port.options.mk>
+
+.if ${ARCH} == "i386"
+EXTRA_PATCHES=	${PATCHDIR}/extra-patch-i386-src_config_load_validate__web.rs
+.endif
+
 .include <bsd.port.mk>
diff --git a/net/telemt/files/extra-patch-i386-src_config_load_validate__web.rs b/net/telemt/files/extra-patch-i386-src_config_load_validate__web.rs
new file mode 100644
index 000000000000..f4fe3dd2f4db
--- /dev/null
+++ b/net/telemt/files/extra-patch-i386-src_config_load_validate__web.rs
@@ -0,0 +1,11 @@
+--- src/config/load/validate_web.rs.orig	2026-09-02 08:19:03 UTC
++++ src/config/load/validate_web.rs
+@@ -23,7 +23,7 @@ const MAX_WEB_TOMBSTONES_PER_SESSION: usize = 4096;
+ const MAX_WEB_FRAME_BYTES: usize = 1024 * 1024;
+ const MAX_WEB_FRAMES_PER_BODY: usize = 4096;
+ const MAX_WEB_TOMBSTONES_PER_SESSION: usize = 4096;
+-const MAX_WEB_MEMORY_ENVELOPE_BYTES: usize = 4 * 1024 * 1024 * 1024;
++const MAX_WEB_MEMORY_ENVELOPE_BYTES: usize = u32::MAX as usize;
+ 
+ /// Validates WEB policy and resource bounds before building runtime state.
+ pub(super) fn validate(config: &mut ProxyConfig) -> Result<()> {