Hello Maxim,

I have tried and I got error 403.

http {
...
geo $nolimit {
default 0;
10.0.0.0/24 1; # my network
192.168.0/24 1; #my network
}
limit_req_zone $binary_remote_addr zone=ratezone:10m rate=5r/s;
...

server {
location / {
error_page 418 = @nolimit;
if ($nolimit) {
return 418;
}
limit_req zone=ratezone burst=10 nodelay;
index.html index.php;
if (!-f $request_filename) {
rewrite ^/(.*)$ /index.php last;
}
}

location @nolimit {
}
...
}



Is it right?

My goal is to block/reduce some DDoS without disturbing the internal subnet network.

P.S: I'm using geoip to redirect some country to a static file but from time to time there's some botnet on the allowed county.


Thanks in advance