What I've done is (for windows machines that don't need to use RPC, like my own machines at home) route port 135 through my router to an internal IP address that doesn't exist. In the VERY unlikely...