Blocking Facebook App

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Blocking Facebook App

almaznz

89 posts

Master Geek

#111771 14-Nov-2012 15:00

Hi Guys,

I have been set a challenge by one of my schools that I manage to try and block access to the Facebook App on the iPad / iPhone / iTouch.

Since it is a school they have watchdog filtering which has all of the Facebook domains blocked so that if you try and access the sites from a browser either from a mobile device OR from a computer it doesn't work.

However if you open the FB app you are able to update / check FB with no issues.

It is happening on Wifi as they do not have 3g data and i have checked that they are indeed connected to the schools Wifi and not connected to any other rouge AP's.

i have an IPCop box in play and have created ACL's with the facebook domains blocked as well but it continues to work.

Any ideas would be helpful

Matt

wellygary

8341 posts

Uber Geek

#717148 14-Nov-2012 15:45

Its likely not using port 80

the App will likely be using an API and connecting over a custom port or range of ports,

your best bet is to grab a copy of the app and do some testing on what goes through IPCOP

I am fairly sure that the app has been re-written since the below site asked the same question, ( the App used to be pig slow, but is much faster now, and since you have port 80 blocked, its likely to be not using it)

http://apple.stackexchange.com/questions/11393/what-port-does-iphone-native-facebook-app-use

Oblivian

7304 posts

Uber Geek

ID Verified

#717164 14-Nov-2012 15:57

including fbcdn.net? and their HTTPS counterparts (apps secure the connection)

Stole these from another fella with same issue

To 66.220.144.0-66.220.159.255, any protocol
To 69.63.176.0-69.63.191.255, any protocol
To 204.15.20.0-204.15.23.255, any protocol
To 69.171.224.0-69.171.255.255, any protocol

almaznz

89 posts

Master Geek

#717169 14-Nov-2012 16:04

yes i have fbcdn.net in there. but i didn't have those ranges.

i will have to add those in and see how i go.

from looking at the logs it definitely seems as if they are using non-standard ports as while i refresh the news feed on the app and check the logs it doesn't really show any traffic.

NonprayingMantis

6434 posts

Uber Geek

#717172 14-Nov-2012 16:09

Can't they just delete the facebook app and disallow app store downloads?

almaznz

89 posts

Master Geek

#717176 14-Nov-2012 16:14

On the school's own devices this is the case.

However they are doing BYOD scheme at the school now, so the apps are actually installed at home and then used at school.

NonprayingMantis

6434 posts

Uber Geek

#717180 14-Nov-2012 16:21

almaznz: On the school's own devices this is the case.

However they are doing BYOD scheme at the school now, so the apps are actually installed at home and then used at school.

well in that case a student can come in with a 3G ipad and not even use the school's network at all.

almaznz

89 posts

Master Geek

#717186 14-Nov-2012 16:27

NonprayingMantis:
almaznz: On the school's own devices this is the case.

However they are doing BYOD scheme at the school now, so the apps are actually installed at home and then used at school.

well in that case a student can come in with a 3G ipad and not even use the school's network at all.

That is just an issue that would needed to be faced if / when those circumstances arise.

however your not adding any extra information for the scenario at hand which is a BYOD device with Wifi only connecting to the schools wifi network