diff --git a/security/py-fail2ban/Makefile b/security/py-fail2ban/Makefile
index 7a909e61217..e2ddeac7ff5 100644
--- a/security/py-fail2ban/Makefile
+++ b/security/py-fail2ban/Makefile
@@ -2,6 +2,7 @@
 
 PORTNAME=	fail2ban
 PORTVERSION=	0.10.1
+PORTREVISION=	1
 CATEGORIES=	security python
 PKGNAMEPREFIX=	${PYTHON_PKGNAMEPREFIX}
 
@@ -39,7 +40,7 @@ FILES=		${WRKSRC}/bin/fail2ban-client \
 		${WRKSRC}/man/fail2ban-client.h2m \
 		${WRKSRC}/setup.py
 
-MAN_FILES= 	${WRKSRC}/man/fail2ban-client.1 \
+MAN_FILES=	${WRKSRC}/man/fail2ban-client.1 \
 		${WRKSRC}/man/fail2ban-client.h2m \
 		${WRKSRC}/man/fail2ban-regex.1 \
 		${WRKSRC}/man/fail2ban-server.1 \
diff --git a/security/py-fail2ban/files/patch-config_action.d_pf.conf b/security/py-fail2ban/files/patch-config_action.d_pf.conf
new file mode 100644
index 00000000000..e9ae34df900
--- /dev/null
+++ b/security/py-fail2ban/files/patch-config_action.d_pf.conf
@@ -0,0 +1,20 @@
+--- config/action.d/pf.conf.orig	2017-10-12 11:46:46 UTC
++++ config/action.d/pf.conf
+@@ -18,8 +18,8 @@
+ # also, these rulesets are loaded into (nested) anchors
+ # to enable them, add
+ #     anchor f2b {
+-#        name1
+-#        name2
++#        anchor name1
++#        anchor name2
+ #        ...
+ #     }
+ # to your main pf ruleset, where "namei" are the names of the jails
+@@ -110,5 +110,5 @@ allports = any
+ # Option: multiport
+ # Notes.: addition to block access only to specific ports
+ # Usage.: use in jail config: "banaction = pf[actiontype=<multiport>]"
+-multiport = any port <port>
++multiport = any port {<port>}
+ 
diff --git a/security/py-fail2ban/pkg-message b/security/py-fail2ban/pkg-message
index ab76e01a530..a7007ff790c 100644
--- a/security/py-fail2ban/pkg-message
+++ b/security/py-fail2ban/pkg-message
@@ -12,9 +12,9 @@ http://www.fail2ban.org/wiki/index.php/MANUAL_0_8#Configuration
 If you have custom filters or actions and you are upgrading from
 0.9.x please check them.
 
-Users of pf: please note that instead of 
-action = pf
-you hae to write someting like
-action = pf[port={80 443}, name=http]
+Users of pf: please read the notes in action.d/pf.conf and the
+discussion at https://github.com/fail2ban/fail2ban/pull/1925
+Please note that fail2ban will put curly braces '{}' around the
+ports in the action so you shouldn't do it yourself.
 
 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -