diff --git a/internal/dnsforward/ipset.go b/internal/dnsforward/ipset.go
index dcc55e1d..7347890a 100644
--- a/internal/dnsforward/ipset.go
+++ b/internal/dnsforward/ipset.go
@@ -21,7 +21,7 @@ type ipsetHandler struct {
 }
 
 // newIpsetHandler returns a new initialized [ipsetHandler].  It is not safe for
-// concurrent use.  c is always non-nil for [Server.Close].
+// concurrent use.
 func newIpsetHandler(
 	ctx context.Context,
 	logger *slog.Logger,
@@ -50,7 +50,7 @@ func newIpsetHandler(
 
 		return h, nil
 	} else if err != nil {
-		return h, fmt.Errorf("initializing ipset: %w", err)
+		return nil, fmt.Errorf("initializing ipset: %w", err)
 	}
 
 	return h, nil