diff --git a/security/hotssh/files/waf.diff b/security/hotssh/files/waf.diff
new file mode 100644
index 000000000000..1779b35e5187
--- /dev/null
+++ b/security/hotssh/files/waf.diff
@@ -0,0 +1,9 @@
+$FreeBSD$
+
+begin-base64 644 waf.diff
+QlNESUZGNDBBAAAAAAAAAC8AAAAAAAAA1iQBAAAAAABCWmg5MUFZJlNZmtHAWwAAGnhAeDAAEgAI
+ALJAACAAMQAABigNDyiyfPeMkA0EDE3IKcFK3efF3JFOFCQmtHAWwEJaaDkxQVkmU1mHZoexAACS
+wEDAAEAAAAggADDMBSmmkRsKI8XckU4UJCHZoexAQlpoOTFBWSZTWeC8dGQAAABXgAAgQue6BJgA
+P6/eZCAAdCsSNGQaNNAAPKAih5JkGgB5Jo0aAUSK4MdnRCnFtACtsBiQMGaSUICS+QUZo5+rCQfH
+gsIwJ6WZ2hC8QMDY0iFXatdg6e1SAgGcsXjNdwji05WPntU7viZ+LuSKcKEhwXjoyA==
+====