After some days looking at it I have to admit I don't get it. At the same time, it replies through em2 ok but this shouldn't matter should it? I mean, the important thing is the destination, not the route. If the browser sends a request through the given address/IP, the reply should get there...