Securing win2k server with NAT

As a project I have configured RRAS with NAT to dial on demand. Using one of the many online scanners I can see that all my ports are closed except one.. 135 which is used by RPC can anyone tell me how to secure this using the RRAS interface or am Ibarking up the wrong tree?