I think that's the old security model, socket connections now require their own cross-domain policy file which the flash player (9 and up) automatiacally looks for:

http://www.adobe.com/devnet/flashpla...icy_files.html