diff --git a/adapter/outbound/reject.go b/adapter/outbound/reject.go
index d5a9c823..43833238 100644
--- a/adapter/outbound/reject.go
+++ b/adapter/outbound/reject.go
@@ -53,9 +53,6 @@ func (rw *nopConn) Read(b []byte) (int, error) {
 }
 
 func (rw *nopConn) Write(b []byte) (int, error) {
-	if len(b) == 0 {
-		return 0, nil
-	}
 	return 0, io.EOF
 }
 
diff --git a/tunnel/tunnel.go b/tunnel/tunnel.go
index 90fd42be..11458d38 100644
--- a/tunnel/tunnel.go
+++ b/tunnel/tunnel.go
@@ -410,6 +410,11 @@ func handleTCPConn(connCtx C.ConnContext) {
 		if err != nil {
 			return nil, err
 		}
+		for _, chain := range remoteConn.Chains() {
+			if chain == "REJECT" {
+				return remoteConn, nil
+			}
+		}
 		peekMutex.Lock()
 		defer peekMutex.Unlock()
 		peekBytes, _ = conn.Peek(conn.Buffered())