PF kdeconnect pf rules

[zcatav]

Hello,

I am not from an IT background, I am using FreeBSD 14.1 on a laptop as an end user.
The pf.conf created with Bastille setup is as follows.

## generated by bastille setup
ext_if="vtnet0"

set block-policy return
scrub in on $ext_if all fragment reassemble
set skip on lo

table <jails> persist
nat on $ext_if from <jails> to any -> ($ext_if:0)
rdr-anchor "rdr/*"

block in all
pass out quick keep state
antispoof for $ext_if inet
pass in inet proto tcp from any to any port ssh flags S/SA keep state

I installed Kdeconnect but I think it is not working because I did not set the firewall permissions correctly.

pass out proto {tcp, udp} to any port 1716 keep state
pass in proto {tcp, udp} to any port 1716 keep state

It works when the firewall is closed. Kdeconnect wants the following port connections.

USER COMMAND PID FD PROTO LOCAL ADDRESS FOREIGN ADDRESS
user kdeconnect 2333 10 udp46 *:1716 *:*
user kdeconnect 2333 12 tcp46 *:1716 *:*

The rules I researched and tried did not work. What kind of pf rule set is required for Kdeconnect?

Thanks for your help.