diff --git a/src/relay.c b/src/relay.c
index ac215ba3..0897aa4d 100644
--- a/src/relay.c
+++ b/src/relay.c
@@ -689,10 +689,12 @@ start_relay(jconf_t *conf,
         LOGI("disabled remote domain resolution");
     }
 
+#ifndef MODULE_TUNNEL
     if (conf->acl != NULL) {
         LOGI("initializing acl...");
         acl = !init_acl(conf);
     }
+#endif
 
 #ifdef HAVE_SETRLIMIT
     /*