close connection to first hop of declined tunnel