There's an old referrers check in ~iworx/iworx.ini, section [iworx], that blocks referrers that aren't the server.