For the version 3.0 policy agent for Sun Java System Application Server or GlassFish Application Server, policy evaluation with a DNS condition fails, because by default, the ServletRequest.getRemoteHost method returns an IP address instead of a host name.
Workaround. Change the default behavior by setting the following property in the Application Server or GlassFish domain.xml file:
dns-lookup-enabled="true"
Or, if you prefer, set this property in the Application Server or GlassFish Admin console.