I was able to get this working by rebooting the server. I am still unclear as to what needed to happen during the reboot process (Openfire, firewall?) to make Openfire listen on the correct ports. I had restarted the iptables service, network service, restarted Openfire and it wasn’t until rebooting that things started working. This happened on another server with a previous installation of Openfire.
Typically you would not need to update openfire.xml at all, as the settings are written out to this file. In fact if you have edited this file, and the permissions are changed (e.g. ownership or r/w mod stats), set up will fail. I also wonder, is selinux enabled, passive, or disabled?