You don't open ports, applications do. And when applications have opened a port, you tell your firewall (in its ruleset) to allow incoming connections to it. BTW, what is 'a basic FreeBSD firewall'? There are three firewalls in the base system, none is enabled by default.