4 files changed, 187 insertions, 2 deletions
diff --git a/net/spoofdpi/files/modules.txt b/net/spoofdpi/files/modules.txt
new file mode 100644
index 000000000000..363d89b25ba8
--- /dev/null
+++ b/net/spoofdpi/files/modules.txt
@@ -0,0 +1,105 @@
+# github.com/BurntSushi/toml v1.5.0
+## explicit; go 1.18
+github.com/BurntSushi/toml
+github.com/BurntSushi/toml/internal
+# github.com/davecgh/go-spew v1.1.1
+## explicit
+github.com/davecgh/go-spew/spew
+# github.com/gabriel-vasile/mimetype v1.4.10
+## explicit; go 1.21
+# github.com/go-playground/locales v0.14.1
+## explicit; go 1.17
+# github.com/go-playground/universal-translator v0.18.1
+## explicit; go 1.18
+# github.com/go-playground/validator/v10 v10.28.0
+## explicit; go 1.24.0
+# github.com/google/gopacket v1.1.19
+## explicit; go 1.12
+github.com/google/gopacket
+github.com/google/gopacket/layers
+github.com/google/gopacket/pcap
+# github.com/jackpal/gateway v1.1.1
+## explicit; go 1.24.2
+github.com/jackpal/gateway
+# github.com/kr/pretty v0.1.0
+## explicit
+# github.com/leodido/go-urn v1.4.0
+## explicit; go 1.18
+# github.com/mattn/go-colorable v0.1.13
+## explicit; go 1.15
+github.com/mattn/go-colorable
+# github.com/mattn/go-isatty v0.0.19
+## explicit; go 1.15
+github.com/mattn/go-isatty
+# github.com/miekg/dns v1.1.61
+## explicit; go 1.19
+github.com/miekg/dns
+# github.com/pmezard/go-difflib v1.0.0
+## explicit
+github.com/pmezard/go-difflib/difflib
+# github.com/rs/zerolog v1.33.0
+## explicit; go 1.15
+github.com/rs/zerolog
+github.com/rs/zerolog/internal/cbor
+github.com/rs/zerolog/internal/json
+github.com/rs/zerolog/log
+# github.com/samber/lo v1.52.0
+## explicit; go 1.18
+# github.com/stretchr/objx v0.5.2
+## explicit; go 1.20
+github.com/stretchr/objx
+# github.com/stretchr/testify v1.11.1
+## explicit; go 1.17
+github.com/stretchr/testify/assert
+github.com/stretchr/testify/assert/yaml
+github.com/stretchr/testify/mock
+github.com/stretchr/testify/require
+# github.com/urfave/cli/v3 v3.6.1
+## explicit; go 1.22
+github.com/urfave/cli/v3
+# golang.org/x/crypto v0.42.0
+## explicit; go 1.24.0
+# golang.org/x/mod v0.27.0
+## explicit; go 1.23.0
+golang.org/x/mod/semver
+# golang.org/x/net v0.43.0
+## explicit; go 1.23.0
+golang.org/x/net/bpf
+golang.org/x/net/internal/iana
+golang.org/x/net/internal/socket
+golang.org/x/net/ipv4
+golang.org/x/net/ipv6
+golang.org/x/net/route
+# golang.org/x/sync v0.17.0
+## explicit; go 1.24.0
+golang.org/x/sync/errgroup
+# golang.org/x/sys v0.36.0
+## explicit; go 1.24.0
+golang.org/x/sys/unix
+golang.org/x/sys/windows
+# golang.org/x/text v0.29.0
+## explicit; go 1.24.0
+# golang.org/x/tools v0.36.0
+## explicit; go 1.23.0
+golang.org/x/tools/go/gcexportdata
+golang.org/x/tools/go/packages
+golang.org/x/tools/go/types/objectpath
+golang.org/x/tools/go/types/typeutil
+golang.org/x/tools/internal/aliases
+golang.org/x/tools/internal/event
+golang.org/x/tools/internal/event/core
+golang.org/x/tools/internal/event/keys
+golang.org/x/tools/internal/event/label
+golang.org/x/tools/internal/gcimporter
+golang.org/x/tools/internal/gocommand
+golang.org/x/tools/internal/packagesinternal
+golang.org/x/tools/internal/pkgbits
+golang.org/x/tools/internal/stdlib
+golang.org/x/tools/internal/typeparams
+golang.org/x/tools/internal/typesinternal
+golang.org/x/tools/internal/versions
+# gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15
+## explicit
+# gopkg.in/yaml.v3 v3.0.1
+## explicit
+gopkg.in/yaml.v3
diff --git a/net/spoofdpi/files/pkg-message.in b/net/spoofdpi/files/pkg-message.in
new file mode 100644
index 000000000000..a102654f3bf3
--- /dev/null
+++ b/net/spoofdpi/files/pkg-message.in
@@ -0,0 +1,43 @@
+[
+{ type: install
+  message: <<EOM
+You can use ${PORTNAME} rc.d service and specify arguments for ${PORTNAME} program in rc.conf file like this below or you can use the configuration file located in '%%ETCDIR%%':
+To enable/start ${PORTNAME} service:
+	# service ${PORTNAME} enable
+	# service ${PORTNAME} start
+Now, you can configure your web browser to use this proxy.
+${PORTNAME} listens on port 8080 by default and uses DNS as 8.8.8.8.
+EOM
+}
+{ type: upgrade
+  maximum_version: "0.12.2"
+  message: << EOM
+Some command-line arguments of ${PORTNAME} has been refactored, a few examples:
+	# -addr => -listen-addr, -port => -listen-port and etc.
+See the commit link below or project page for the new documentation.
+	# https://github.com/xvzc/${PORTNAME}/commit/a2993ac68d87a0525a93bc23984d21e341214199
+EOM
+}
+{ type: upgrade
+  maximum_version: "1.0.1"
+  message: << EOM
+A new feature (-fake-https-packets) has been added that adds up a dependency on ${PORTNAME}: libpcap. This feature requires the daemon to be run as root if it is enabled with an argument, it will fail with the default '${PORTNAME}' user, to be able to use it, switch the daemon user to root.
+	# sysrc ${PORTNAME}_user="root"
+EOM
+}
+{ type: upgrade
+  maximum_version: "1.0.2"
+  message: << EOM
+${PORTNAME} now supports configuration files written in TOML, installed in ${ETCDIR} directory with a sample config file.
+Options given through the command-line flags (via rc.conf or as user) will override the options set by the config file.
+You can edit the config via being as root or adding your user to the ${PORTNAME} group (default group).
+Config locations are: $SPOOFDPI_CONFIG environment variable, ${ETCDIR}/${PORTNAME}.toml, $XDG_CONFIG_HOME/${PORTNAME}/${PORTNAME}.toml and $HOME/.config/${PORTNAME}/${PORTNAME}.toml
+EOM
+}
+{ type: upgrade
+  maximum_version: "1.2.0"
+  message: << EOM
+The whole configuration file has changed, see the documentation for more details. I've updated the sample config in the port.
+EOM
+}
+]
diff --git a/net/spoofdpi/files/spoofdpi.in b/net/spoofdpi/files/spoofdpi.in
index 7c2beb0fc533..9eeedd64b8b2 100644
--- a/net/spoofdpi/files/spoofdpi.in
+++ b/net/spoofdpi/files/spoofdpi.in
@@ -10,7 +10,7 @@
 #			spoofdpi (default empty).
 # spoofdpi_user (str):	User to run spoofdpi as. Default
 #			to "%%USER%%" created by the port.
-# spoofdpi_log (path):	Console log file (default /dev/null).
+# spoofdpi_log (path):	Console log file (default /var/log/spoofdpi.log or set to /dev/null to omit).
 
 . /etc/rc.subr
 
@@ -33,7 +33,7 @@ load_rc_config "${name}"
 eval "${rcvar}=\${${rcvar}:-'NO'}"
 eval "_args=\${${name}_args:-''}"
 eval "_user=\${${name}_user:-'%%USER%%'}"
-eval "_log=\${${name}_log:-/dev/null}"
+eval "_log=\${${name}_log:-/var/log/${name}.log}"
 
 pidfile="/var/run/${name}.pid"
 
diff --git a/net/spoofdpi/files/spoofdpi.toml.sample b/net/spoofdpi/files/spoofdpi.toml.sample
new file mode 100644
index 000000000000..36ce94dbded7
--- /dev/null
+++ b/net/spoofdpi/files/spoofdpi.toml.sample
@@ -0,0 +1,37 @@
+[general]
+
+# Available values are debug, trace, info, warn, error, and disabled. (default: "info")
+log-level = "info"
+
+# Don't print banner
+silent = true
+
+# This option is currently only supported on macOS.
+system-proxy = false
+
+[server]
+
+# If you want to run SpoofDPI remotely (e.g., on a physically separated machine), then you should set this value
+# to 0.0.0.0. Otherwise, it is recommended to leave this option as default.
+listen-addr = "127.0.0.1:8080"
+
+[dns]
+
+# available options: udp/https/system (default: "udp")
+mode = "https"
+
+# DNS address and port number
+# this is used when dns-mode is set to udp.
+addr = "8.8.8.8:53"
+
+# This is used when dns-mode is set to https.
+https-url = "https://dns.google/dns-query"
+
+# Filters DNS queries by record type (A for IPv4, AAAA for IPv6).
+# Available values are "ipv4", "ipv6", and "all".
+# If your Internet Service Provider (ISP) doesn't support IPv6, it is recommended to set this option to "ipv4" for stability.
+qtype = "all"
+
+# If true, DNS records will be cached to improve performance and reduce latency.
+cache = false
+