add rule inet filter input tcp dport { 137, 139, 445 } accept
add rule inet filter input udp dport 137-138 accept
