fix to EUCA-10063 - added packet marking and explicit SNAT match when VM communicates with another VM using public-EL IP