Klaus Darilion writes: > What would be a normal (out-of-dialog) check? the same checks you do for initial requests that don't have Route header, i.e., check if domain of request uri is local, authenticate caller if local, etc. -- juha