Is the property Request.IsLocal spoofable, or 100% trustworthy?

I want to be certain a request is coming from my box only.

Edit
Report