- Ports are allowed in default zone as soon as a service is enabled - Ports are disabled when all services depending on the port are disabled - Shows current enabled state of services and their each of thier ports