Comment # 21 on bug 1160068 from Gabor Horvath

A workaround for the issue is filtering out TCP port 8008 and 8009 with
netfilter locally:

-A INPUT -p tcp -m tcp --sport 8009 -j REJECT --reject-with
icmp-port-unreachable
-A INPUT -p tcp -m tcp --dport 8009 -j REJECT --reject-with
icmp-port-unreachable
-A INPUT -p tcp -m tcp --sport 8008 -j REJECT --reject-with
icmp-port-unreachable
-A INPUT -p tcp -m tcp --dport 8008 -j REJECT --reject-with
icmp-port-unreachable