The container running the task grading can be configured with a network interface using the Allow internet access inside the grading container? checkbox. However, the description of the checkbox is quite vague and does not describe precisely what is happening.
It actually does more than enabling IP forwarding and NAT to the Internet, it also adds and configures local interfaces with IPv4 and IPv6, which in our case are used without "Internet access".