Juniper Expert

We forward ip addresses to firewall device via routing instance in juniper
I send the connection coming back from the firewall to the device where it will be used with the static route again.
everything is going well, but I have a separate network device that I tunneled from, the connections from there do not go directly to the device that needs to go with a static route.
I do not want connections from this device to go to the firewall

//Datacenter Uplink
root@qfx-k67# show interfaces ae0 | display set
set interfaces ae0 description DGN
set interfaces ae0 unit 0 family inet filter input to-fw
set interfaces ae0 unit 0 family inet address x.x.x.x/30


//Firewall Filter
root@qfx-k67# show firewall family inet filter to-fw | display set
set firewall family inet filter to-fw term t1 from destination-prefix-list korumali
set firewall family inet filter to-fw term t1 then routing-instance to-fw-ins
set firewall family inet filter to-fw term t2 then accept


//AE2 firewall input interfaces
root@qfx-k67# show routing-instances | display set
set routing-instances to-fw-ins routing-options static route 0.0.0.0/0 next-hop x.x.x.x
set routing-instances to-fw-ins instance-type virtual-router
set routing-instances to-fw-ins interface ae2.0


//Tunneling Router
incoming connections with tunnel come from device here
the problem is in the routes coming from here
it goes to firewall first i know why

root@qfx-k67# show interfaces xe-0/0/5 | display set
set interfaces xe-0/0/5 description CCR1036-p2
set interfaces xe-0/0/5 unit 0 family inet address x.x.x.x/30