I tried simplifying the problem statement, it appears to be counter productive. So here is the full story. I have a server (A) behind NAT, in a country that blocks a lot of websites and performs DPI.
One of my sites uses a DSL connection with all the computers behind a NAT-router. One of the boxes on the network is a Windows 2000 Terminal server (admin mode only). And I port-forward port 3389 to ...