It is restriction by Flash, not file server. Flash Player will check for crossdomain.xml for security reason.