portblock: use ss when available, netstat is "obsolete"

netstat was "deprecated" ~ ten years ago already.
Finally distributions are no longer installing it by default,
or drop it completely.