...I drop all netBIOS traffic (inbound and outbound) at the firewall.