Connection Refused is definitely coming from the CMS side - at the web server level. It is very odd to say the least. Only traffic on 9505 should be encrypted, 1081 should be HTTP unless you are using SSL?
You should not be running the Linux Player as root - a user account is sufficient and recommended.
Can you try updating your CMS settings and configuring the File download mode to
Off ? this will remove the webserver from the equation and download files over SOAP. Much less efficient but might point to the issue.