Read that, some systems don't allow anything to connect to the worldpay module (the callback system) unless the domain ends in worlpay, that's not us. The reason why is that although it increases security I can't guarantee that with the thousand odd web servers that use this module, that they are configured correctly to look up the host hane of incoming connections, plus worldpay has a 30 second time out when it sucks the page in, so there's a real possibility taht it could lead to more errors.

This would be simple to add if it were based on ip addresses because then non nameserver look up would be required, but sparky monkeys over there, never saw fit to channel things through a constant range of addresses instead they add them a random it would have been trivial to bounce all requests through one ip address, but nope they rely on the weak point of the internet, the DNS system.

Philip.