Continuing the discussion from How is the QubesOS firewall implemented?:
This can be prevented by using the Stream Isolation feature provided by sys-whonix / whonix-gateway.
To isolate a circuit for a specific qube, it is possible by combining redsocks.
Also, sys-whonix bundled Onion Circuits, which is useful for checking the isolation.