diff --git a/daemon/media_socket.c b/daemon/media_socket.c
index 8290ed86f..244d33c10 100644
--- a/daemon/media_socket.c
+++ b/daemon/media_socket.c
@@ -1629,6 +1629,9 @@ static const char *kernelize_target(kernelize_state *s, struct packet_stream *st
 		// nothing to forward
 		s->non_forwarding = true;
 		s->blackhole = true;
+		reti->non_forwarding = 1;
+		reti->decrypt.cipher = REC_NULL;
+		reti->decrypt.hmac = REH_NULL;
 		return NULL;
 	}