I'd try /rw/config/qubes_ip_change_hook or /rw/config/rc.local.
The first script is executed by netvm during any virtual interface setup.
The second one is executed once on boot, also in appvms.
Don't forget to mark them executable with chmod +x.
--
Radosław Szkodziński