search

confirmedcode / Lockdown-iOS

GNU General Public License v3.0
888 stars 86 forks source link

Facebook app ignores firewall rules #37

Closed lubbo closed 3 years ago

lubbo commented 4 years ago

Enabling the Facebook rules in the firewall doesn't prevent the Facebook App from working. i.e The Facebook app request following domains at login:

If using Safari the block is effective and the sites are denied, using the App it is not. Are you aware of this? There are also other apps that can escape the VPN block?

mickaphd commented 4 years ago

Yes that's very weird and a problem I guess for this type of app. Any dev to comment here?

Velocet commented 4 years ago

It's a common practice for apps to hardcode IPs into their code so they could circumvent blocking attempts. If you really want to block just the domains/ips that facebook owns you have a hard time: 19,579 domains hosted across 208 IP addresses: https://ipinfo.io/AS32934

lubbo commented 4 years ago

I don’t really think Facebook App hardcodes IP addresses, it would be a pain for them! In any case a more advanced reverse lookup can be implemented to block communications.

hijohnnylin commented 4 years ago

Chiming in here - our initial local builds actually blocked many ranges of supposed Facebook IPs, which did more effectively block the Facebook app. However, they also ended up blocking random sites totally unrelated to Facebook. @lubbo if you'd like to look at a solution (including reverse lookup), happy to help with it and potentially merge it.

For now the workaround to stop yourself from using the Facebook App is to delete the Facebook App :)

hijohnnylin commented 3 years ago

Closing due to lack of activity.