If you grep /sbin/SuSEfirewall2 for samba you'll see, that udp 137/138 are involved too. So open it to internal NIC.

Further comments welcome what services that are. Think broadcast and browsing.

137-139 is what win9x/me uses for SMB -- win2k/xp both use 445, except for compatibility with win9x/me.