>#1 suggestion - remove requirement for HTTP_REFERRER
>That will make it available to people behind firewalls.

This is not a restriction to people behind firewalls. We have a lot of people using it behind a firewall. You have this situation because something locally is hidding that value, probably a proxy or manually configured elsewhere. But, it is related to a setup. It's not related to a hardware infrastructure.