From what I have understood, a lot of rules and pre-configuration is already taken place at the background of pfsense,
which isn't show at the gui, to make us newbies live easier.
(A small downside is that is could add some confusing for us noobs)
Furthermore i would like to say: 'shoot those bears of the road you are seeing!'
Try first if your app's will run out-of-the-box; then u can look and ask around if u need a rule applied into pfsense.
btw: there is a upnp package available. I didn't had to use it so far.