I wouldn't open port 2525 though, it's not needed for anything except for malware as far as I know.
Next to that, if you use the "./install.sh directadmin" command, CSF will already automatically open the ports needed by applications installed by DA.