Behind the firewall, we want all users to be able to access it. Outside the firewall, we want the packets to these ports dropped and ignored.
Use the iptables commands we have learned thus far to set up a simple firewall for the SAMBA ports to this specification. Extra credit (of course, there is no credit) will go to someone who can add these rules to a startup script.