diff --git a/daemon/media_socket.c b/daemon/media_socket.c
index a55b35a9b..53b25929c 100644
--- a/daemon/media_socket.c
+++ b/daemon/media_socket.c
@@ -1631,6 +1631,9 @@ static const char *kernelize_target(kernelize_state *s, struct packet_stream *st
 		// nothing to forward
 		s->non_forwarding = true;
 		s->blackhole = true;
+		reti->non_forwarding = 1;
+		reti->decrypt.cipher = REC_NULL;
+		reti->decrypt.hmac = REH_NULL;
 		return NULL;
 	}