Sonos VLAN Setup - high ports (not a multicast issue)

[Trudge]

Hi,

Posting this on Sonos as well, but its very networky so giving it a go here also.

Firstly, thanks to everyone who helped contribute to the Sonos multicast posts on here, saved me endless time.

I am in the process of moving my Sonos devices onto their own VLAN, multicast is working fine, airplay etc all works well. Mapping back to CIFS shares is working, so everything functioning.

Sonos devices are on VLAN75 (172.16.75.0/24), clients are on LAN (172.16.25.0/24) (eventually clients will end up on VLAN100 but that's for another day.)

Initially I was running with some catchall rules to permit any to any between to the 2 VLANs and I'm in the process of locking down the rules on VLAN75

VLAN75 Firewall rules

Port Aliases

The issue is that I am seeing some random port chat outside of those ports from the VLAN75 Sonos devices aimed at the clients still hitting the catchall rule.

From an IOS client on startup

From a Windows client on startup

From an OSX client on startup

If I disable the VLAN75 catchall rule, the clients start, pause, complain about not being able to detect SONOS devices. but after 2 or 3 minutes everything starts working and stays working until I restart the client. So these ports don't seem essential, just cause delays (WAF very low)

Q1) Does anyone have a good idea of what is going on here with these ports? The seem more nice to have than essential.
Q2) Does anyone have a good idea of the range to enable here? I can't seem to find anything official on these ports, and what i can find on the net seems to suggest opening massive ranges (32k to 65535 etc)
Q3) Im sure we'll all know in a few days, anyone know if Sonos S2 is just going to mess this all up again?

Cheers,
Trudge.