Saner default

Restrict TCP access to the docker0 IP address