diff --git a/osdep/PortMapper.cpp b/osdep/PortMapper.cpp
index 825972b00..9aeeb8d6f 100644
--- a/osdep/PortMapper.cpp
+++ b/osdep/PortMapper.cpp
@@ -123,6 +123,7 @@ public:
 
 					if (initnatpmp(&natpmp,0,0) != 0) {
 						mode = 1;
+						closenatpmp(&natpmp);
 #ifdef ZT_PORTMAPPER_TRACE
                         PM_TRACE("PortMapper: NAT-PMP: init failed, switching to UPnP mode" ZT_EOL_S);
 #endif
diff --git a/service/OneService.cpp b/service/OneService.cpp
index b767dea8a..b30dc390c 100644
--- a/service/OneService.cpp
+++ b/service/OneService.cpp
@@ -1411,7 +1411,7 @@ public:
 						json &blAddrs = v.value()["blacklist"];
 						if (blAddrs.is_array()) {
 							for(unsigned long i=0;i<blAddrs.size();++i) {
-								const InetAddress ip(OSUtils::jsonString(tryAddrs[i],"").c_str());
+								const InetAddress ip(OSUtils::jsonString(blAddrs[i],"").c_str());
 								if (ip.ss_family == AF_INET)
 									v4b.push_back(ip);
 								else if (ip.ss_family == AF_INET6)