Docker容器内部禁止外网访问

version: '3'
services:
  vtd:
    image: ubuntu-bionic-desktop:1
    #ports:
    #  - "6080:80" # vnc端口映射
    #  - "5900:5900" # vnc端口映射
    # privileged: true 
    networks:
      - private
    #volumes:
    #  - /dev/shm:/dev/shm
    #environment:
    #      - NVIDIA_VISIBLE_DEVICES=1 # 挂载gpu
    #      - VNC_PASSWORD=123456 # vnc密码配置
    #      - LD_PRELOAD=/usr/local/lib/faketime/libfaketime.so.1 # faketime配置
    #      - FAKETIME=@2019-1-1 10:10:10  # faketime配置
networks:
  private:
    driver: bridge
    driver_opts:
      com.docker.network.bridge.enable_ip_masquerade: 'false' 

主要是最后的network配置，其他不相关的配置已注释

内网还是正常访问