I tried simplifying the problem statement, it appears to be counter productive. So here is the full story. I have a server (A) behind NAT, in a country that blocks a lot of websites and performs DPI.

If they are both in the same collision domain (bridged together via switchports, etc.), then each client will be issued an address from the first responder. Once they have an address, they will ...