Portsentry vs ipchains firewalling

["Mike Lewis" <cajun cajuninc com>]

There's been a lot of talk of on the list lately about Portsentry
(http://www.psionic.com/abacus/portsentry/).  I've been using a modified
firewall script (http://ipchains.nerdherd.org/) for sometime now.  I decided
based on all the traffic on the list about Portsentry to investigate it.

Do I understand correctly, that the ipchains script from
(http://ipchains.nerdherd.org/) does exactly the same thing as Portsentry
does, except the ipchains script does the redirection/denial "up front"
where the Portsentry s/w does the redirection/denial "in real time" ?

Is this correct, or have I missed something ?  It would seem though the
Portsentry s/w is more robust than is the ipchains script.

Thanks for any pointers,
Mike