Amazingly, it was the response page itself that got blocked(, TCP reset to be precise). Perhaps the Great Fire Wall read 'www.facebook.com' as a substring in url, and subsequently killed it.