;COMMENT: Deny incoming File and Printer sharing (NetBT/SMP)
;DESCRIPTION: Scanning networks to locate file and printer shares is one of the most frequent attacks on the Internet. This rule specifically rejects all incoming traffic to NetBT ports 137, 138, 139, 140 and the Server Message Block (SMP) port 445.

Deny-File-Sharing
		Comment = "Deny File and Printer sharing",
		Destination-Port = "137 138 139 140 445",
		Rule-Action = Deny,
		Log-Control = Enabled,
		Log-Message = "Dropped incoming File and Printer Sharing packet",
		Log-Details = "Scanning networks to seek out and locate file and printer shares is one of the most frequent attacks on the Internet. Whereas NetBT/SMB packets over TCP/IP is part of the normal background noise on the Internet, it should also be seen as a severe security risk - especially if the NetBT/SMB ports are not blocked by Firewall software. Once malicious scanning software has located available shared resources, the drive letters can be mapped and the hacker has gained access to the computer's files. The results can be deleted files or theft of valuable information.",
		Direction = Incoming,
		Log-Severity = Warning,