> The anti-hotlink stanza IS having an effect, just not the one I want.
> What do I need to correct?

It is because the regular expression locations are matched first ( http://wiki.nginx.org/HttpCoreModule#location ).

As in:

location ~* \.(png|gif|jpg|jpeg|swf|ico)(\?[0-9]+)?$ {
is processed first and since nginx doesn't merge/apply directives from multiple (matching) location blocks the proxy_pass defined in
'location /' is not effective.


So you either have to duplicate the proxy_* block:

location ~* \.(png|gif|jpg|jpeg|swf|ico)(\?[0-9]+)?$ {
valid_referers none blocked dev.local.lan *.dev.local.lan;

if ($invalid_referer) {
return 403;
}
proxy_pass http://PROXY;
proxy_redirect off;
.....
}


or use nested locations (I think it should work):


location / {
proxy_pass http://PROXY;
proxy_redirect off;
.....

location ~* \.(png|gif|jpg|jpeg|swf|ico)(\?[0-9]+)?$ {
valid_referers none blocked dev.local.lan *.dev.local.lan;
if ($invalid_referer) {
return 403;
}
}



rr

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx