notice that they can add arbitrarily
long delays to <i>all</i> users' sessions by "poisoning"
<code>mod_delay</code>'s cache of timing information.  For example, a
malicious client might connect, send a <code>USER</code> command, and then
not disconnect for long time.  After a few such clients have connected,
<code>mod_delay</code> will add a delay for <i>all</i> clients, such that
some legitimate clients may time out.  In effect, this may look like a sort
of denial of service (DoS).

<p>
To guard against t