This is just an idea and I'm sure someone will have a way around this. But when you display the form, set a cookie with a known, difficult to guess value. When you process the form, check for the existance of that cookie. If someone is posting from another domain they won't have have that cookie.

You can also check the refering URL, but that can be spoofed I think.