Which ports should be filtered out to protect a network from SMB attacks?

$135,139,$ and $443$

$134$ to $138$ and $445$

$53$ TCP$/$UDP and $445$ UDP

$137$ to $139$ and $445$