Conventional wisdom seems to be that SMB, even in its over TCP variant over port 445, is only to be used over the intranet and access should be cut at the perimeter firewall. People needing access ...