Make AFW look at public IPs generated by ohai, not private IPs, targeted at ec2 instances.