diff --git a/dns/powerdns-recursor/Makefile b/dns/powerdns-recursor/Makefile
index c756ef58ed69..28e4c46e039b 100644
--- a/dns/powerdns-recursor/Makefile
+++ b/dns/powerdns-recursor/Makefile
@@ -1,77 +1,76 @@
 # Created by: sten@blinkenlights.nl
 
 PORTNAME=	recursor
-DISTVERSION=	4.5.1
+DISTVERSION=	4.5.2
 CATEGORIES=	dns
 MASTER_SITES=	http://downloads.powerdns.com/releases/
 PKGNAMEPREFIX=	powerdns-
 DISTNAME=	pdns-${PORTNAME}-${DISTVERSION}
 
 MAINTAINER=	tremere@cainites.net
 COMMENT=	Advanced DNS recursor
 
 LICENSE=	GPLv2
 LICENSE_FILE=	${WRKSRC}/COPYING
 
 BROKEN_armv6=	fails to compile: use of overloaded operator << is ambiguous
 BROKEN_armv7=	fails to compile: use of overloaded operator << is ambiguous
-BROKEN_i386=	crashes on startup (SIGSEGV)
 BROKEN_FreeBSD_12_powerpc64=	fails to compile: Assembler messages: unaligned opcodes detected in executable segment
+NOT_FOR_ARCHS=	i386
+NOT_FOR_ARCHS_REASON=	archs with 32-bits time_t are no longer supported by upstream
 
 BUILD_DEPENDS=	${LOCALBASE}/include/boost/shared_ptr.hpp:devel/boost-libs
-LIB_DEPENDS=	libboost_context.so:devel/boost-libs \
-		libprotobuf.so:devel/protobuf
+LIB_DEPENDS=	libboost_context.so:devel/boost-libs
 
-USES=		autoreconf compiler:c++11-lib cpe gmake libtool localbase:ldflags \
-		pkgconfig ssl tar:bzip2
+USES=		autoreconf compiler:c++11-lib cpe gmake libtool \
+		localbase:ldflags pkgconfig ssl tar:bzip2
 
 CPE_VENDOR=	powerdns
 USE_RC_SUBR=	pdns-recursor
 
 GNU_CONFIGURE=	YES
 CONFIGURE_ARGS=	--sysconfdir=${PREFIX}/etc/pdns \
-		--with-protobuf \
 		--without-net-snmp \
 		--without-systemd
 
 SUB_FILES=	pkg-message
 
 USERS=		pdns_recursor
 GROUPS=		pdns
 
 OPTIONS_DEFINE=		DNSTAP
 OPTIONS_DEFAULT=	LUA
 OPTIONS_SINGLE=		EXTLUA
 OPTIONS_SINGLE_EXTLUA=	LUA LUAJIT LUAJITOR
 
 DNSTAP_DESC=	dnstap support (see dnstap.info)
 LUAJITOR_DESC=	Use lang/luajit-openresty
 LUAJIT_DESC=	Use lang/luajit
 LUA_DESC=	Use lang/lua
 
 DNSTAP_LIB_DEPENDS=		libfstrm.so:devel/fstrm
 DNSTAP_CONFIGURE_ENABLE=	dnstap
 
 LUAJITOR_LIB_DEPENDS=	libluajit-5.1.so.2:lang/luajit-openresty
 LUAJITOR_CONFIGURE_ON=	--with-lua=luajit
 
 LUAJIT_LIB_DEPENDS=	libluajit-5.1.so.2:lang/luajit
 LUAJIT_CONFIGURE_ON=	--with-lua=luajit
 
 LUA_USES=	lua
 
 .include <bsd.port.pre.mk>
 
 .if ${OPSYS} == FreeBSD && ${OSVERSION} < 1200085 && ${SSL_DEFAULT} != openssl
 CONFIGURE_ARGS+=	--with-libdecaf \
 			--with-libsodium
 LIB_DEPENDS+=		libdecaf.so:security/libdecaf \
 			libsodium.so:security/libsodium
 .else
 CONFIGURE_ARGS+=	--with-libsodium=no
 .endif
 
 post-install:
 	@${MKDIR} ${STAGEDIR}/var/run/pdns-recursor
 
 .include <bsd.port.post.mk>
diff --git a/dns/powerdns-recursor/distinfo b/dns/powerdns-recursor/distinfo
index 53a1758783d4..66d31cf9c6e4 100644
--- a/dns/powerdns-recursor/distinfo
+++ b/dns/powerdns-recursor/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1620750356
-SHA256 (pdns-recursor-4.5.1.tar.bz2) = 3721a1d0e438a683735f518db1e91da6ace1b90fbfdb9c588adabdf164114e79
-SIZE (pdns-recursor-4.5.1.tar.bz2) = 1463138
+TIMESTAMP = 1623230795
+SHA256 (pdns-recursor-4.5.2.tar.bz2) = b1283d5354f1cbb3d15791f96af3ab3e08a13453431e94fe87b8dbe9f78f0184
+SIZE (pdns-recursor-4.5.2.tar.bz2) = 1464834
diff --git a/dns/powerdns-recursor/files/pdns-recursor.in b/dns/powerdns-recursor/files/pdns-recursor.in
index 4a63cb7fb06a..75733410bbad 100644
--- a/dns/powerdns-recursor/files/pdns-recursor.in
+++ b/dns/powerdns-recursor/files/pdns-recursor.in
@@ -1,33 +1,38 @@
 #!/bin/sh
 
 # PROVIDE: pdns_recursor
 # REQUIRE: NETWORKING
 # BEFORE: SERVERS
 # KEYWORD: shutdown
 
 #
 # Add the following lines to /etc/rc.conf to enable pdns_recursor:
 #
 # pdns_recursor_enable="YES"
 # pdns_recursor_flags="<set as needed>"
 #
 # See pdns_recursor(8) for flags.
 #
 
 . /etc/rc.subr
 
 name=pdns_recursor
 rcvar=pdns_recursor_enable
 
 load_rc_config ${name}
 
 pdns_recursor_enable=${pdns_recursor_enable:-"NO"}
 pdns_recursor_conf=${pdns_recursor_conf:-"%%PREFIX%%/etc/pdns/recursor.conf"}
 required_files=${pdns_recursor_conf}
 
+# run_rc_command would send ${name}_flags as parameters to $command (daemon)
+# This ensures they are actually passed to pdns_recursor instead.
+actual_pdns_recursor_flags="${pdns_recursor_flags}"
+pdns_recursor_flags=""
+
 pidfile="/var/run/${name}.pid"
 actual_command="%%PREFIX%%/sbin/${name}"
 command="/usr/sbin/daemon"
-command_args="-c -f -r -P ${pidfile} ${actual_command} --daemon=no --write-pid=no"
+command_args="-c -f -r -P ${pidfile} ${actual_command} --daemon=no --write-pid=no ${actual_pdns_recursor_flags}"
 
 run_rc_command "$1"