Ouch, i forgot to configure interface with 'semanage interface -a -t netif_t -r s1 eth0'. So, with that, i got expected result. Now, in audit a deny 'egress' avc appeared, and s4->s1 information flow stopped. Now everything is right, thanks a lot :)
The problem is that a user_t:s1 process/socket can not receive
netlabel_peer_t:s4 network traffic; since the problem is a constraint
violation we know it is not a type enforcement problem, e.g. user_t not being
able to receive netlabel_peer_t traffic, but rather a MLS problem, e.g. s1 not
being able to receive s4 traffic.
