Cole Tierney Wrote:
-------------------------------------------------------
> Or is there a better method to block these?

Not really better but good enough :)

map $http_referer $waffableref {
default 0;
~*\{.*\:\; 1;
}
map $http_user_agent $waffableua {
default 0;
~*\{.*\:\; 1;
}
map $waffableref$waffableua $waffable {
default 0;
~1 1;
}

# Block shellshock:
if ($waffable) { return 444; }

# Drop'm from logging:
map $waffable $loggable {
default 1;
~1 0;
}

access_log /path/to/access.log combined if=$loggable;

---
nginx for Windows http://nginx-win.ecsds.eu/