Reported by an auditor.

New connections are currently accepted synchronously, so any new connection must wait until the last one is setup before it can start. This may allow an attacker to prevent a node from acquiring new peers.

We should also check and reject connections from duplicate IPs right away, rather than waiting for after the handshake.