Yes, the connection tracking module is needed because the netbios sends out broadcasts, but replies arrive back from specific machines. The question is if this module in the firewall configuration helps already? Also, if you are browsing network shares you are probably in a "safe" network already and do not need the strict firewall?