use FQDN, not ipaddress