Note that by default, redis listens to more than localhost.
(To a paranoid, this is obviously a bug, even though it might not be.)