You can add rejectRemoteRequests="true" on the server side tcp or http channels. With this set remoting will only allow connections from the loopback address and thus will reject cross machine calls. This is equivalent to setting bindTo="" or machineName="localhost".

In v2.0 IPC channel would probably be a better choice for local machine x-process scenarios.