- On client Mac startup X11.app and check preferences->Security->"Allow connections from network clients"
- Open an xterm from the X11.app menu
- ssh into host machine with the X flag (from the xterm)
ssh y.y.y.y -X -luser
- Everything works (even with firewall on), no need to set DISPLAY etc.