BIND (named) is listening on port 53 and some other high-numbered port. What is going on?
FreeBSD 3.0 and later use a version of BIND that uses a random high-numbered port for outgoing queries. If you want to use port 53 for outgoing queries, either to get past a firewall or to make yourself feel better, you can try the following in /etc/namedb/named.conf:
options { query-source address * port 53; };
You can replace the * with a single IP address if you want to tighten things further.
Congratulations, by the way. It is good practice to read your sockstat(1) output and notice odd things!