eklogin requires a separate listener on the eklogin port; I suggest you include this and tell Dave about it.