I think this is the key: the client initiates the connection. This way NAT is not the problem. Perhaps you can do some tests:
I think this is the key: the client initiates the connection. This way NAT is not the problem. Perhaps you can do some tests: