It ensures that defined services are present, but that no other ports are open.

如果没有打开其它端口，则它确保提供已定义的服务。