Learning new, using the option --net=none also creates a new loopback interface for that program. So it can't even use the loopback to get to the real machine. Quick note, pretty cool. I use this option to prevent programs from accessing the network if they aren't supposed to. Paranoid enough to make sure they are unable to.