diff --git a/SPECS/rsyslog.spec b/SPECS/rsyslog.spec
index ecbc2e2..aec3d13 100644
--- a/SPECS/rsyslog.spec
+++ b/SPECS/rsyslog.spec
@@ -6,7 +6,7 @@
 Summary: Enhanced system logging and kernel message trapping daemon
 Name: rsyslog
 Version: 8.1911.0
-Release: 6%{?dist}
+Release: 7%{?dist}
 License: (GPLv3+ and ASL 2.0)
 Group: System Environment/Daemons
 ExcludeArch: i686
@@ -23,7 +23,7 @@ BuildRequires: automake
 BuildRequires: bison
 BuildRequires: flex
 BuildRequires: libcurl-devel
-BuildRequires: libgcrypt-devel 
+BuildRequires: libgcrypt-devel
 BuildRequires: libfastjson-devel >= 0.99.8
 BuildRequires: libestr-devel >= 0.1.9
 BuildRequires: libtool
@@ -154,6 +154,12 @@ Group: System Environment/Daemons
 Requires: %name = %version-%release
 BuildRequires: net-snmp-devel
 
+%package udpspoof
+Summary: Provides the omudpspoof module
+Group: System Environment/Daemons
+Requires: %name = %version-%release
+BuildRequires: libnet-devel
+
 %description
 Rsyslog is an enhanced, multi-threaded syslog daemon. It supports MySQL,
 syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part,
@@ -184,7 +190,7 @@ authentication and secure connections. GSSAPI is commonly used for Kerberos
 authentication.
 
 %description kafka
-The rsyslog-kafka package provides modules for Apache Kafka input and output. 
+The rsyslog-kafka package provides modules for Apache Kafka input and output.
 
 %description mmaudit
 This module provides message modification supporting Linux audit format
@@ -226,6 +232,11 @@ protocol.
 The rsyslog-snmp package contains the rsyslog plugin that provides the
 ability to send syslog messages as SNMPv1 and SNMPv2c traps.
 
+%description udpspoof
+This module is similar to the regular UDP forwarder, but permits to
+spoof the sender address. Also, it enables to circle through a number
+of source ports.
+
 %prep
 # set up rsyslog-doc sources
 %setup -q -a 1 -T -c
@@ -318,6 +329,7 @@ autoreconf -if
 	--enable-omkafka \
 	--enable-omprog \
 	--enable-omstdout \
+	--enable-omudpspoof \
 	--enable-omuxsock \
 	--enable-pgsql \
 	--enable-pmaixforwardedfrom \
@@ -327,7 +339,7 @@ autoreconf -if
 	--enable-relp \
 	--enable-snmp \
 	--enable-unlimited-select \
-	--enable-usertools 
+	--enable-usertools
 
 make
 
@@ -482,8 +494,15 @@ done
 %files snmp
 %{_libdir}/rsyslog/omsnmp.so
 
+%files udpspoof
+%defattr(-,root,root)
+%{_libdir}/rsyslog/omudpspoof.so
 
 %changelog
+* Wed Nov 18 2020 Attila Lakatos <alakatos@redhat.com> - 8.1911.0-7
+- add back rsyslog-udpspoof package
+  resolves: rhbz#1869874
+
 * Thu Jun 18 2020 Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-6
   RHEL 8.3.0 ERRATUM
 - added patch preventing imfile crash when selinux blocks symlink
@@ -497,7 +516,7 @@ done
 - added qpid-proton as another source and enabled omamqp1 module
   in a separate sub-package with it statically linked
   resolves: rhbz#1713427
-- extended config.enabled patch to cover rest of the cases 
+- extended config.enabled patch to cover rest of the cases
   resolves: rhbz#1659383
 - added patch making json serialization thread-safe
   resolves: rhbz#1789675
@@ -539,7 +558,7 @@ done
 
 * Fri Aug 30 2019 Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-13
   RHEL 8.1.0 ERRATUM
-- added patch enabling stricter TLS certs checking conforming to 
+- added patch enabling stricter TLS certs checking conforming to
   common criteria requirements
   resolves: rhbz#1733244
 
@@ -630,7 +649,7 @@ done
 
 * Mon Jul 02 2018 Jiri Vymazal <jvymazal@redhat.com> - 8.36.0-1
 - changed PID file name to follow upstream
-- removed config option to disable stdlog as it is now 
+- removed config option to disable stdlog as it is now
   disabled by default
 
 * Thu Jun 28 2018 Jiri Vymazal <jvymazal@redhat.com> - 8.36.0-1
@@ -665,4 +684,4 @@ done
   - libdbi
   - omruleset
   - pmrfc3164sd
-- imported from fedora26  
+- imported from fedora26