diff --git a/daemon/media_socket.c b/daemon/media_socket.c
index 1d6fd8a10..68a659deb 100644
--- a/daemon/media_socket.c
+++ b/daemon/media_socket.c
@@ -1620,6 +1620,9 @@ static const char *kernelize_target(kernelize_state *s, struct packet_stream *st
 		// nothing to forward
 		s->non_forwarding = true;
 		s->blackhole = true;
+		reti->non_forwarding = 1;
+		reti->decrypt.cipher = REC_NULL;
+		reti->decrypt.hmac = REH_NULL;
 		return NULL;
 	}