later tonight I'll capture all irc/DCC traffic with a sniffer and see if I can figure out where the 208.x.y.z address is introduced... that might not tell me how or why, but at least I'll know where