Reply to post:

The proper, and well-established, way to fix this is to use Proxy ARP and either port protection or one VLAN per customer. Then all traffic will pass through the network gateway even though the IP addresses are in the same subnet.