Doesn't Portsentry ignore ports that have a service bound to them like the SSH daemon? In that case, it wouldn't help Brian's problem, since ssh is running, portsentry would ignore any attacks to port 22, right?