Regarding the -icc=false option, if you want to do it by default to all containers, just modify the docker daemon's options adding --iptables=false [0] and restart the daemon.

[0] https://docs.docker.com/articles/networking/#between-contain...