Remote access to services/session/token not working

Hi,

My case scenario:

Machine X has a javascript App and tries to get token (through ajax call to services/session/token ) from machine Y.
Machine Y has Drupal rest interface with services - it's supposed to be in the future the repository of data (yeah I know I can make another way to store the data... but I want to test this case scenario because I could fall the app into a site if I can't support it anymore).

Now, both machines are host and guest. If I use my code with the app in guest - and drupal in guest I can get the token. If I use the app in host and drupal in guest I can't have the token.

Everything up to date.
Can anyone help me?

Thanks in advance!