[cobalt-security] Difference between hosts.deny and ipchains DENY

[loptson@xxxxxxxxxxxx]

What is the relationship between putting an entry into hosts.deny and adding a DENY rule in ipchains to the input chain?  What do they each block? Is one preferred over the other or is one more comprehensive in what it blocks?

Thanks,
Paul