reference to internal IP, not to hostname
added additional java policy