[keeler]

Are they able to initiate outbound connections?

[classichasclass]

No. They can't route out themselves (only through the proxy, which they don't know how to use and won't accept outbound connections from them anyway), and there is no UPnP enabled on that network.