exclude network traffic between containers