We allow facebook.com through the firewall for Graph API calls, but one of the issues we had is that the Facebook login dialog takes forever to load and loads without stylesheets/images. We fixed that by white-listing fbstatic-a.akamaihd.net, but we want to make sure we won’t have surprises later.
https://stackoverflow.com/questions/19568411/list-of-facebook-cdn-addresses