It seems to figure it out based off of the inet addr assigned to the interface whether or not it is a local network. I actually just modified this on my container today. In post arguments I added a new flag:
-m "192.168.1.0/24,172.17.0.0/16,172.18.0.0/16"