Question is, do I now need to undo the part where I set iptables to off? Or just leave it be?
You got CSF, so iptables should not be ruing by itself.

You can give this command as root:

Code:

chkconfig iptables off
This prevents iptables from starting after a reboot, which you don't need because you already use CSF/LFD if I'm correct.
If you also have ipv6 then also use "chkconfig ip6tables off".

Then restart csf:

Code:

csf -r
I presume you installed CSF using the "./install-directadmin.sh" option, which sets various defaults for DA already, including port 2222.