I already said that the datastore absolutely cannot reside outside my firewall. So I'm hoping Mark might either have a fix for the headers being dropped from CNAME handoffs, or a different way of mapping the site into the namespace.