Long story short: local corporate server have 2 interfaces: 1) Public Internet IP address (eth0) 2) Local network IP address (eth1) By default Linux tries to reply on interface with default route (eth0 in this case), even if request came from different iface (eth1). Let’s fix it.