Disable masquerading (hack)

This won't be needed when the next release of Docker lands; it supports
--ip-masq=false.