[csdvrx]

TLDR: "Alternatively, you can block outbound TCP 445/SMB using a firewall or through VPN settings."

Simple and easy: don't allow TCP 445 outside your LAN