This is most probably due to ip redirects. As all your firewalls reside on the same network with clients, after the first packet from the client your default gateway firewall informs it with an icmp message that there is a better path to the destinat...