1 ftr should not be able to Kill 2 b-17s in a sigle pass..
The problem would appear to be at least partially due to netlag, which I'm sure you've experienced after getting shot down and listening to anywhere from five to ten seconds of rapid-fire hit sounds while you're in the tower.
Basically, it works like this: J. Random Buffbuster sails up and unloads a ton of fire into the lead bomber, which rolls over and goes down missing the left wing. The pilot bails, being autojumped into one of the other two bombers. All of the netlagged hits that
were recorded by the shooter's FE as being assessed against the buff driver's plane -- the lead bomber -- get assessed by the buff driver's FE against his plane, which is now the second bomber.
This could be resolved by changing the hit data packets that the FEs exchange to include a plane number -- for people flying fighters or not in formation, the plane number would always be '1', but for buffs in formation, it could be '1', '2', or '3'. By identifying which plane in a formation is taking the damage, it would allow a player's FE to ignore shots hitting a bomber after the player has bailed from it into another bomber. eliminating automatic damage spillover when the pilot bails.