bind knot to internal ip only