firewall enable
firewall default permit

ip access-list extended NET
  deny udp any-source any-destination d-port 139
  deny udp any-source any-destination d-port 137
  deny udp any-source any-destination d-port 138
  deny udp any-source any-destination d-port 445
  deny tcp any-source any-destination d-port 137
  deny tcp any-source any-destination d-port 138
  deny tcp any-source any-destination d-port 139
  deny tcp any-source any-destination d-port 445
  permit ip any-source any-destination
!

interface ethernet 0/0/1
ip access-group NET in
interface ethernet 0/0/2
ip access-group NET in
interface ethernet 0/0/3
ip access-group NET in
interface ethernet 0/0/4
ip access-group NET in
interface ethernet 0/0/5
ip access-group NET in
interface ethernet 0/0/6
ip access-group NET in
interface ethernet 0/0/7
ip access-group NET in
interface ethernet 0/0/8
ip access-group NET in
interface ethernet 0/0/9
ip access-group NET in
interface ethernet 0/0/10
ip access-group NET in
interface ethernet 0/0/11
ip access-group NET in
interface ethernet 0/0/12
ip access-group NET in
interface ethernet 0/0/13
ip access-group NET in
interface ethernet 0/0/14
ip access-group NET in
interface ethernet 0/0/15
ip access-group NET in
interface ethernet 0/0/16
ip access-group NET in
interface ethernet 0/0/17
ip access-group NET in
interface ethernet 0/0/18
ip access-group NET in
interface ethernet 0/0/19
ip access-group NET in
interface ethernet 0/0/20
ip access-group NET in
interface ethernet 0/0/21
ip access-group NET in
interface ethernet 0/0/22
ip access-group NET in
interface ethernet 0/0/23
ip access-group NET in
interface ethernet 0/0/24
ip access-group NET in