Client connections always use an ephemeral port?

1. • Ports below 1024 are reserved only for use by root / the administrator. This is a standard security feature which stops a normal user masquerading as a system service / daemon. The majority of well-known services run on ports < 1024.
2. • As a result all user connections have to come from a port > 1024 .

lets take a scenario , incase of NACL in subnets ->
inbound port allowed is 22 ( is for server side)
outbound port ranges are <1024 (1025- 65535) they etablish connection through this ports.