moves to internal networking (was: host-only)
specifies netmasks manually

(hopefully resolves reliability issues)