Firewall/Network Requirements

Does anyone have a detailed understanding of the firewall requirements for Zwift ?

My machine is in a fairly complex network which I can customise but I need to know how.

I can use Zwift at a basic level but I am unable to connect my phone or join multi player rides.

I am technical so please feel free to be detailed in your response.

I ask the question and then find the answer myself

Outbound UDP to destination port 3022 required.

On FreeBSD with NAT is need to allow outbound udp port 3022. Example: pass out quick on rl0 from any to any port = 3022 keep state