Facebook auto-connect and required ports

eskimoroll
Offline

Active Subscriptions:

None

8 years 7 months ago #55133 by eskimoroll

Facebook auto-connect and required ports was created by eskimoroll

Hello,

I have a website that uses JFBConnect to logon with Facebook credentials, it works perfectly. However, I have attempted to button-up my ports with iptables and have run into an issue where the auto-login times out.

If I simplify my iptables, I get a timeout initiating the auto-login feature:

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     tcp  --  anywhere             anywhere             tcp state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:http
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:https
DROP       all  --  anywhere             anywhere            

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

However, if I remove the "DROP all" directive (or flush all the rules to ACCEPT everything) the handshake works properly.

I realize that this is probably more of an iptables question, but I was hoping someone could explain how the JFBConnect handshake works so I can understand which rules need to be defined and implemented.

Thanks in advance

The topic has been locked.

alzander
Offline

Support Specialist

8 years 7 months ago #55142 by alzander

Replied by alzander on topic Facebook auto-connect and required ports

I honestly know nothing about IPTables, so I can't really read the above table you included.

For the auto-authentication, JFBConnect simply checks a cookie that Facebook drops for the user when they are logged in. If so, we redirect the user to standard Joomla page on your site which instructs JFBConnect to authenticate the user. There are no special ports that we use on your site. My guess is that it's not a port issue but more of a firewall issue where too many connections are being detected and the firewall is thinking it's an attack.. and then dropping the extra connections.

That's my best guess. Either way, the calls we make all are routed through standard Joomla and nothing out of the ordinary there.

I hope that helps explain,
Alex

The topic has been locked.

Start
Prev
1
Next
End

SourceCoast Login

Facebook auto-connect and required ports