diff --git a/dns/powerdns-recursor/Makefile b/dns/powerdns-recursor/Makefile
index c756ef58ed..28e4c46e03 100644
--- a/dns/powerdns-recursor/Makefile
+++ b/dns/powerdns-recursor/Makefile
@@ -1,7 +1,7 @@
 # Created by: sten@blinkenlights.nl
 
 PORTNAME=	recursor
-DISTVERSION=	4.5.1
+DISTVERSION=	4.5.2
 CATEGORIES=	dns
 MASTER_SITES=	http://downloads.powerdns.com/releases/
 PKGNAMEPREFIX=	powerdns-
@@ -15,22 +15,21 @@ LICENSE_FILE=	${WRKSRC}/COPYING
 
 BROKEN_armv6=	fails to compile: use of overloaded operator << is ambiguous
 BROKEN_armv7=	fails to compile: use of overloaded operator << is ambiguous
-BROKEN_i386=	crashes on startup (SIGSEGV)
 BROKEN_FreeBSD_12_powerpc64=	fails to compile: Assembler messages: unaligned opcodes detected in executable segment
+NOT_FOR_ARCHS=	i386
+NOT_FOR_ARCHS_REASON=	archs with 32-bits time_t are no longer supported by upstream
 
 BUILD_DEPENDS=	${LOCALBASE}/include/boost/shared_ptr.hpp:devel/boost-libs
-LIB_DEPENDS=	libboost_context.so:devel/boost-libs \
-		libprotobuf.so:devel/protobuf
+LIB_DEPENDS=	libboost_context.so:devel/boost-libs
 
-USES=		autoreconf compiler:c++11-lib cpe gmake libtool localbase:ldflags \
-		pkgconfig ssl tar:bzip2
+USES=		autoreconf compiler:c++11-lib cpe gmake libtool \
+		localbase:ldflags pkgconfig ssl tar:bzip2
 
 CPE_VENDOR=	powerdns
 USE_RC_SUBR=	pdns-recursor
 
 GNU_CONFIGURE=	YES
 CONFIGURE_ARGS=	--sysconfdir=${PREFIX}/etc/pdns \
-		--with-protobuf \
 		--without-net-snmp \
 		--without-systemd
 
diff --git a/dns/powerdns-recursor/distinfo b/dns/powerdns-recursor/distinfo
index 53a1758783..66d31cf9c6 100644
--- a/dns/powerdns-recursor/distinfo
+++ b/dns/powerdns-recursor/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1620750356
-SHA256 (pdns-recursor-4.5.1.tar.bz2) = 3721a1d0e438a683735f518db1e91da6ace1b90fbfdb9c588adabdf164114e79
-SIZE (pdns-recursor-4.5.1.tar.bz2) = 1463138
+TIMESTAMP = 1623230795
+SHA256 (pdns-recursor-4.5.2.tar.bz2) = b1283d5354f1cbb3d15791f96af3ab3e08a13453431e94fe87b8dbe9f78f0184
+SIZE (pdns-recursor-4.5.2.tar.bz2) = 1464834
diff --git a/dns/powerdns-recursor/files/pdns-recursor.in b/dns/powerdns-recursor/files/pdns-recursor.in
index 4a63cb7fb0..75733410bb 100644
--- a/dns/powerdns-recursor/files/pdns-recursor.in
+++ b/dns/powerdns-recursor/files/pdns-recursor.in
@@ -25,9 +25,14 @@ pdns_recursor_enable=${pdns_recursor_enable:-"NO"}
 pdns_recursor_conf=${pdns_recursor_conf:-"%%PREFIX%%/etc/pdns/recursor.conf"}
 required_files=${pdns_recursor_conf}
 
+# run_rc_command would send ${name}_flags as parameters to $command (daemon)
+# This ensures they are actually passed to pdns_recursor instead.
+actual_pdns_recursor_flags="${pdns_recursor_flags}"
+pdns_recursor_flags=""
+
 pidfile="/var/run/${name}.pid"
 actual_command="%%PREFIX%%/sbin/${name}"
 command="/usr/sbin/daemon"
-command_args="-c -f -r -P ${pidfile} ${actual_command} --daemon=no --write-pid=no"
+command_args="-c -f -r -P ${pidfile} ${actual_command} --daemon=no --write-pid=no ${actual_pdns_recursor_flags}"
 
 run_rc_command "$1"