diff --git a/doc/Changelog b/doc/Changelog
index a38cf4531..8907e0906 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -2,6 +2,7 @@
 	- can configure ssl service to one port number, and not on others.
 	- fixup windows compile with ssl support.
 	- Fix double free in unbound-host, reported by Steve Grubb.
+	- iana portlist updated.
 
 1 November 2011: Wouter
 	- dns over ssl support as a client, ssl-upstream yes turns it on.
diff --git a/util/iana_ports.inc b/util/iana_ports.inc
index cb0a3902b..635865af8 100644
--- a/util/iana_ports.inc
+++ b/util/iana_ports.inc
@@ -5095,6 +5095,7 @@
 17007,
 17185,
 17219,
+17221,
 17234,
 17235,
 17500,