I need to block access to log files that are stored in a publicly accessible directory from being viewed publicly. These are stored as CGI files and as things are right now, anyone can view the directory directly and download the .CGI file which is a huge security concern as it showcases IP address of visitors and other things.


How can I block access to "/path/to/the/directory/*.cgi" ?

I tried:

location /path/to/the/directory/*.cgi {
deny all;
}

But it did not work.

Anyone?..

Sitruc Wrote:
-------------------------------------------------------
> I need to block access to log files that are stored in a publicly
> accessible directory from being viewed publicly. These are stored as
> CGI files and as things are right now, anyone can view the directory
> directly and download the .CGI file which is a huge security concern
> as it showcases IP address of visitors and other things.
>
>
> How can I block access to "/path/to/the/directory/*.cgi" ?
>
> I tried:
>
> location /path/to/the/directory/*.cgi {
> deny all;
> }
>
> But it did not work.

What about:

location ~ /path/to/the/directory/*\.cgi$ {
deny all;
}

---
nginx for Windows http://nginx-win.ecsds.eu/