be more, restrictive on ntp front
continue support for LXC with attached public ip
unlog martian
Permissive mode off on lxcs directly wired to the internet

cc @jpcw @regilero @samaradona @squizou
use default online/ovh ipfo netmasks
Last piece for directly adressable lxc:

in shorewall, be not permissive on net network if publicly addressable

cc @jpcw @regilero @samaradona
Merge pull request #84 from makinacorpus/stable

Stable