use the public IP, if not in the VPC subnet
a little flexibility because grep sucks
getting nrpe checks working better.