# strict, not true: with true only traffic originating on an isolated network is
# filtered, so containers on the default `podman` network still reach this one.
[Network]
Options=isolate=strict