Xserver no longer listen on tcp 6000:6010 by default. I wonder if that pf rule is still necessary.
Index: pf.conf =================================================================== RCS file: /cvs/src/etc/pf.conf,v retrieving revision 1.54 diff -u -p -r1.54 pf.conf --- pf.conf 23 Aug 2014 05:49:42 -0000 1.54 +++ pf.conf 28 Aug 2016 01:22:26 -0000 @@ -6,6 +6,3 @@ set skip on lo block return # block stateless traffic pass # establish keep-state - -# By default, do not permit remote connections to X11 -block return in on ! lo0 proto tcp to port 6000:6010
