Thanks, prix.
I suspect that the ping test I posted above is bogus, because afterward I pinged all sorts of nonexistent addresses and all were successful, so long as the address was valid in form.
Is there anything in my docker's hosts file that indicates that all addresses are forwarded back to the docker's loopback?