Walled Garden for the Social Login
Renato.neves (Talk | contribs) (→Twitter Login) |
Renato.neves (Talk | contribs) (→LinkedIn Login) |
||
Line 175: | Line 175: | ||
=== LinkedIn Login === | === LinkedIn Login === | ||
− | 8. | + | 8.22.161.0/24 |
− | + | 64.152.25.0/24 | |
− | + | 70.42.142.0/24 | |
− | + | 103.20.92.0/23 | |
− | + | 103.20.94.0/23 | |
− | + | 108.174.0.0/20 | |
− | + | 144.2.0.0/22 | |
− | 199.101. | + | 144.2.7.0/24 |
− | + | 144.2.192.0/22 | |
− | 208. | + | 185.63.144.0/23 |
− | + | 185.63.147.0/24 | |
+ | 199.101.161.0/24 | ||
+ | 204.2.228.0/24 | ||
+ | 208.50.161.0/24 | ||
+ | 208.203.151.0/24 | ||
=== Google Login === | === Google Login === |
Revision as of 18:41, 8 November 2018
In order to enable social and traditional logins you need to configure a list of URLs that the users need to have access without being authenticated in the Wi-Fi network.
This list of URLs, called Walled Garden, can be configured based on domain names or IPs. The most effective configuration is based on domain names, once most of current social networks and applications use dynamic IPs and CDNs to deliver their services, which is very difficult to track all IPs ranges being used.
Contents |
Walled Garden by domain names
Check if your vendor has full support to Walled Garden by DNS names. Some vendors accept domain names but resolve them to IP just once, which do not work for current applications using dynamic IP ranges.
The following list of domains includes the subdomains required to be whitelisted using the *. wildcard. Depending of your vendor, it may not be necessary to include the *. wildcard, adding just the domain already includes all its subdomains. Check your vendor specifications.
Social-ID NOW Platform
*.socialidnow.com
Facebook Login
facebook.com *.facebook.com *.facebook.net *.fbcdn.net *.fbsbx.com *.akamaihd.net *.akamaiedge.net
For some devices, such as iOS, the Facebook also loads URLs from Google domain. In order to prevent issues like "Error opening page" alerts that are showed on Apple CNA, you also needs to add the following Google domains:
*.doubleclick.net *.google.com *.google.com.br (for Brazil deployments)
Facebook Account Kit Login
Add the domains from Facebook login plus:
*.accountkit.com
Google+ Login
*.gstatic.com *.googleusercontent.com *.google.com *.googleapis.com
Twitter Login
*.twimg.com *.twitter.com
LinkedIn Login
*.licdn.com *.linkedin.com
Google Analytics
*.google-analytics.com
YouTube
*.youtube.com *.ytimg.com *.google.com *.gstatic.com *.doubleclick.net *.googlevideo.com *.googleadservices.com
Also add the google.com domain for your country, for example: *.google.com.br (Brazil).
Bypass Apple CNA
Sometimes you want to bypass the Apple CNA (Captive Network Assistant) portal. Add the following urls to disable it:
apple.com captive.apple.com appleiphonecell.com ibook.info itools.info thinkdifferent.us
Bypass Android Captive Portal Login
Sometimes you want to bypass the Android Captive Portal Login browser. Add the following domains to disable it:
connectivitycheck.gstatic.com connectivitycheck.android.com clients3.google.com
Walled Garden by IP ranges
Important: the following list of IPs can change over time. You need to regularly check if new ranges were added or removed in order to keep all services working as expected. You can also inform us if any new IP range was added to a service by sending an email to support@socialidnow.com.
This list of IPs was generated based on the IP Address Blocks from public AS Numbers (ASN) of the following services. These ranges are very wide which can lead to security breaches or enabling unwanted services. In some cases you can restrict ranges to the ones used in your country.
Social-ID Platform
The Social-ID Platform can be used from different regions.
Consider one of the following lists according to your Captive Portal region deployment:
Production: South America (sa-east)
18.228.0.0/15 18.231.0.0/16 52.67.0.0/16 52.94.248.48/28 52.95.240.0/24 52.95.255.0/28 54.94.0.0/16 54.207.0.0/16 54.232.0.0/15 177.71.128.0/17
Production: Europe Central (eu-central)
3.120.0.0/14 18.153.0.0/16 18.184.0.0/15 18.194.0.0/15 18.196.0.0/15 35.156.0.0/14 52.28.0.0/15 52.46.184.0/22 52.57.0.0/16 52.58.0.0/15 52.94.248.112/28 52.95.248.0/24 52.95.255.128/28 54.93.0.0/16
Staging: United States (us-east)
198.211.103.48 107.170.154.155
Facebook Login
31.13.24.0/21 31.13.64.0/18 31.13.64.0/19 45.64.40.0/22 66.220.144.0/20 69.63.176.0/20 69.171.224.0/19 74.119.76.0/22 103.4.96.0/22 129.134.0.0/16 157.240.0.0/16 173.252.64.0/18 179.60.192.0/22 185.60.216.0/22 199.201.64.0/22 204.15.20.0/22
Twitter Login
64.63.0.0/18 69.12.56.0/21 69.195.160.0/19 103.252.112.0/22 104.244.40.0/21 185.45.4.0/22 185.45.4.0/23 192.44.68.0/23 192.48.236.0/23 192.133.76.0/22 199.16.156.0/22 199.59.148.0/22 199.69.58.0/23 199.96.56.0/21 199.96.56.0/23 202.160.128.0/22 209.237.192.0/19
LinkedIn Login
8.22.161.0/24 64.152.25.0/24 70.42.142.0/24 103.20.92.0/23 103.20.94.0/23 108.174.0.0/20 144.2.0.0/22 144.2.7.0/24 144.2.192.0/22 185.63.144.0/23 185.63.147.0/24 199.101.161.0/24 204.2.228.0/24 208.50.161.0/24 208.203.151.0/24
Google Login
8.8.4.0/24 8.8.8.0/24 8.15.202.0/24 8.34.208.0/21 8.34.216.0/21 8.35.192.0/21 8.35.200.0/21 23.236.48.0/20 23.251.128.0/19 34.64.0.0/10 35.184.0.0/13 35.192.0.0/12 35.208.0.0/12 35.224.0.0/12 35.240.0.0/13 45.121.228.0/22 64.15.112.0/20 64.233.160.0/19 66.102.0.0/20 66.249.64.0/19 70.32.128.0/19 72.14.192.0/18 74.114.24.0/21 74.125.0.0/16 89.207.231.0/24 103.62.64.0/22 104.132.0.0/16 104.133.0.0/17 104.134.128.0/17 104.154.0.0/15 104.196.0.0/14 107.167.160.0/19 107.178.192.0/18 108.59.80.0/20 108.170.192.0/18 108.177.0.0/17 113.197.106.0/24 130.211.0.0/16 136.112.0.0/12 142.250.0.0/15 146.148.0.0/17 162.216.148.0/22 162.216.148.0/23 162.222.176.0/21 172.102.8.0/21 172.110.32.0/21 172.217.0.0/16 172.253.0.0/16 173.194.0.0/16 173.255.112.0/20 185.25.28.0/23 185.150.148.0/22 185.150.148.0/23 192.104.160.0/23 192.158.28.0/22 192.158.28.0/23 192.178.0.0/15 199.36.154.0/23 199.36.156.0/24 199.91.151.0/24 199.192.112.0/22 199.192.112.0/23 199.223.232.0/21 207.223.160.0/20 208.65.152.0/22 208.65.152.0/23 208.68.108.0/22 208.81.188.0/22 208.117.224.0/19 209.85.128.0/17 209.107.176.0/20 216.58.192.0/19 216.73.80.0/20 216.239.32.0/19 216.252.220.0/22 216.252.220.0/23