>>433
ip access-list wan permit tcp established src any sport any dest any dport any
ip access-list wan deny ip src 192.168.0.0/16 dest any
ip access-list wan deny ip src 172.16.0.0/12 dest any
ip access-list wan deny ip src 10.0.0.0/8 dest any
ip access-list wan deny tcp src any sport any dest any dport range 135 139
ip access-list wan deny udp src any sport any dest any dport range 135 139
ip access-list wan deny tcp src any sport any dest any dport eq 445
ip access-list wan deny tcp src any sport any dest any dport eq 593
ip access-list wan deny tcp src any sport any dest any dport eq 4444
ip access-list wan permit ip src any dest any

こんなんでいい？