1. An apparatus comprising:
the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus at least to,determine a country in which the apparatus is visiting and one or more mobile country codes for said country;
while said apparatus is located in said [ a visited ] country, conduct [ conducting ] a domain name system query of a domain name server located in said country using said one or more mobile country codes [ for said visited country ] to obtain [ , via the domain name server, ] a list of [ identities of ] public land mobile networks of [ located in ] the [ visited ] country in which the apparatus is visiting, referred to as local public land mobile networks;
determine [ determining ] one or more local public land mobile networks [ , ] from said list of [ identities of ] local public land mobile networks obtained from said [ domain name server in response to said ] domain name system query [ , the identities of which ] are also on a list of [ identities of ] public land mobile networks having roaming agreements with a home public land mobile network of the apparatus for untrusted wireless local area network access; and
select [ selecting ] an evolved packet data gateway to establish an internet protocol security tunnel to the evolved packet data gateway from the apparatus, said select [ selecting ] comprising determining said evolved packet data gateway is associated with said one or more [ local ] public land mobile networks [ , from said list of local public land mobile networks obtained from said domain name server in response to said domain name system query that are determined to also be on said list of public land mobile networks having roaming agreements with said home public land mobile network of the apparatus of untrusted wireless local are network access] .