Hi @michaelm,
It may be stating the obvious 
, but these configurations suggest you are opening the 10,000 to 60,000 range both for TCP and UDP traffic, in addition to other TCP/UPD ports. This is even more opened ports than the suggestion above. Your lsof command will list all network files/sockets, even UDP or TCP sockets that are not active. It is not necessary to open inactive sockets and it is not even necessary to open all active sockets if etablished and related connections are allowed (as it should, by default, with ufw).
What we need is a clear answer on how the Roon core manages ports and which ports should be accessible for new clients connections.