I can not find a way to disable the workstation and server services on the external interface. It was easy to do in NT4/Proxy2 from the bindings tab in the network applet.