Do you have the ability to set up PAT (Port Address Translation)? I know this isn't always possible, but I've seen in other situations (such as needing to allow through multiple RDP sessions to different internal IP addresses) being able to use non-standard available ports and then use your router/firewall to translate that to the proper port on the internal side.
So for example, it seems you need port 445 as the actual port to your internal server from the outside world. Instead, set up port 5151 or another arbitrary available unused port as the outside port to open in your firewall. Translate that to an internal port of 445 when going to the IP address of your file server. With this rule, all traffic on the WAN interface using...