I want to block all external traffic but allow internal traffic on a port 138

Question

As a security enhancement, I need to block all incoming external traffic to port 138. But I want to make sure that systems within the same network can still access or communicat