implement arptables IP mangling to stop OVH spaming about misconfigured virtual IPs.
split machines names in groups too.
Source group & machine firewall variables in firewall code.