diff --git a/daemon/media_socket.c b/daemon/media_socket.c
index f9b26e9ac..863591e95 100644
--- a/daemon/media_socket.c
+++ b/daemon/media_socket.c
@@ -1637,6 +1637,9 @@ static const char *kernelize_target(kernelize_state *s, struct packet_stream *st
 		// nothing to forward
 		s->non_forwarding = true;
 		s->blackhole = true;
+		reti->non_forwarding = 1;
+		reti->decrypt.cipher = REC_NULL;
+		reti->decrypt.hmac = REH_NULL;
 		return NULL;
 	}