It is a good idea to block these UDP and TCP ports:
135、137、138、139、尤其是lly 445 on all highsites.
They have to do with Netbios and file shares (SAMBA). Most worms and some trojans use these ports to find their way to other open shares, even if nothing is open they still manage to flood your network. Idiots