XP SP2 Startup Security

Hi,
This is from the XP SP2 doc :

In Windows XP SP2, there is a startup Windows Firewall policy to perform
stateful packet filtering, which allows the computer to perform basic
networking startup tasks using Dynamic Host Configuration Protocol (DHCP)
and the Domain Name System (DNS) protocol to configure the computer and
communicate with a domain controller to obtain Group Policy updates. Once
the Windows Firewall (WF)/Internet Connection Sharing (ICS) service is
started, it uses its configuration and removes the startup policy. The
startup policy settings cannot be configured.

My question is what exactly does this startup filtering is allowing and
blocking(from the doc it seems Dhcp/Dns/NetBIOS/Kerberos are allowed)? Is
there absolutely no way to change this startup firewall filtering settings?

Thanks!

Jicun Zhong