With your average identd on a masquerading firewall, if an ident request comes in for a masqueraded connection, it will return 'ERROR : NO-USER' or something along those lines. This may be quite irritating at times, with, for example, IRC servers that won't let you in if they don't get a valid ident reply.