Right, I didn't think about it that way, thanks!
Edit: what you describe is most likely what is happening here, however I do not have the 'enable only when connecting' option set, so from what you are saying, #2 should not be listening the identd port (it's never connecting), so there might still be an issue

Note: I use port 113 which is not forwarded, it is done by upnp.