Flow rule to allow file sharing, RDP and printing only

[dougpenenman]

I have it working on one network but when I use the same rule on another network it does not. What is wrong with this?
accept ethertype arp; # so nodes can find each other
drop not ipprotocol tcp;
accept dport 3389; # Destination is RDP
accept dport 3386;
accept dport 445;
accept dport 53;
accept dport 138;
accept dport 137;
accept dport 139;
drop chr tcp_syn and not chr tcp_ack; # No new TCP connections (except RDP)
accept; # Accept what’s left, returning RDP traffic