diff --git a/www/lighttpd/Makefile b/www/lighttpd/Makefile
index eadd04f5463..59c24090029 100644
--- a/www/lighttpd/Makefile
+++ b/www/lighttpd/Makefile
@@ -1,11 +1,11 @@
-# $OpenBSD: Makefile,v 1.102 2012/11/15 10:45:23 brad Exp $
+# $OpenBSD: Makefile,v 1.103 2012/11/21 11:41:56 brad Exp $
 
 SHARED_ONLY=	Yes
 
 COMMENT=	secure, fast, compliant, and very flexible web-server
 
 DISTNAME=	lighttpd-1.4.31
-REVISION=	1
+REVISION=	2
 CATEGORIES=	www net
 MASTER_SITES=	http://download.lighttpd.net/lighttpd/releases-1.4.x/
 
diff --git a/www/lighttpd/patches/patch-src_mod_extforward_c b/www/lighttpd/patches/patch-src_mod_extforward_c
new file mode 100644
index 00000000000..52d4a36b68d
--- /dev/null
+++ b/www/lighttpd/patches/patch-src_mod_extforward_c
@@ -0,0 +1,17 @@
+$OpenBSD: patch-src_mod_extforward_c,v 1.5 2012/11/21 11:41:56 brad Exp $
+
+Log address of untrusted proxy with debug.log-request-handling.
+
+--- src/mod_extforward.c.orig	Fri Nov 16 19:55:35 2012
++++ src/mod_extforward.c	Fri Nov 16 19:56:57 2012
+@@ -398,8 +398,8 @@ URIHANDLER_FUNC(mod_extforward_uri_handler) {
+ 	/* if the remote ip itself is not trusted, then do nothing */
+ 	if (IP_UNTRUSTED == is_proxy_trusted(dst_addr_str, p)) {
+ 		if (con->conf.log_request_handling) {
+-			log_error_write(srv, __FILE__, __LINE__, "s",
+-					"remote address is NOT a trusted proxy, skipping");
++			log_error_write(srv, __FILE__, __LINE__, "sss",
++					"remote address", dst_addr_str, "is NOT a trusted proxy, skipping");
+ 		}
+ 
+ 		return HANDLER_GO_ON;