How to disable all network connections inside Docker?
The --icc=false flag is for the Docker daemon; it is applied system wide, not to single containers.
I think specifying --net=none to the docker run command will do what you want; it won't connect the container to the Docker bridge so the container will be unable to communicate to the outside world or other containers.