bind-interfaces
except-interface=lxcbr0