Hi, I am trying to find out whether a HTML or JSP page in on the same machine as the Servlet it calls. The reason I want to do this is preventing a page not on the Servlet machine from posting to the Servlet. I tried comparing the Referer header info with the RemoteHost info, but unfortunately request.getRemoteHost() doesn't give me the real host name when the Servlet machine is behind the firewall. Any ideas about this? TIA, Saul