ipfw2

[Vladimir V. Khramtsov]

Hello,
I would like to recompile my system with ipfw2 default to deny.
I have local net behind of my freebsd, and I want to pass all packets
from this subnet to Internet, except netbios (135-139 udp and tcp). So
I think firewall rule can be like this add allow tcp from
xxx.xxx.xxx.xxx/24 to any "{not 135-139}" (and one more for udp).
Is it rule correct?
P.S. I have to maintain default to deny firewall.
-- 
Best regards,
 Vladimir