Ran into a similar issue - disabling the rp-filter did help:
... in many cases the reverse path filter may decide to drop your intercepted packets. The rp_filter can't be disabled globally, so for each interface do:
sysctl net.ipv4.conf.${INT}.rp_filter=0