The crossdomain.xml file needs to be on the server where the data is being retrieved from.
In this case it sounds like you should deploy the crossdomain.xml to your server.
The crossdomain.xml basically says, "it's ok for SWF files from these domains to access the data on my server."