S7503E在全局禁用445端口号后，通过445端口同步文件到网闸，该怎么设这个acl

在全局禁用445端口号后，外网的服务器要通过445端口同步文件到网闸，该怎么设这个acl

acl advanced 3100 

 rule 10 permit tcp destination 192.168.102.2 0 destination-port eq 445 

 rule 11 permit udp destination 192.168.102.2 0 destination-port eq 445  

 rule 105 deny tcp destination-port eq 135 

 rule 106 deny tcp destination-port eq 137

 rule 107 deny tcp destination-port eq 138

 rule 108 deny tcp destination-port eq 139 

 rule 109 deny udp destination-port eq 135

 rule 120 deny udp destination-port eq 137

 rule 121 deny udp destination-port eq 138 

 rule 122 deny udp destination-port eq 139 

 rule 123 deny udp destination-port eq 445 

 rule 124 deny tcp destination-port eq 445

#

 traffic classifier anti_wana operator and 

 if-match acl 3100 

#

 traffic behavior anti_wana 

 filter deny 

#

 qos policy anti_wana

 classifier anti_wana behavior anti_wana 

#

 qos apply policy anti_wana global inbound 

 qos apply policy anti_wana global outbound