Cole Tierney
April 02, 2015 09:34AM
> On Apr 2, 2015, at 7:21 AM, itpp2012 <nginx-forum@nginx.us> wrote:
>
> Cole Tierney Wrote:
> -------------------------------------------------------
>> Or is there a better method to block these?
>
> Not really better but good enough :)
>
> map $http_referer $waffableref {
> default 0;
> ~*\{.*\:\; 1;
> }
> map $http_user_agent $waffableua {
> default 0;
> ~*\{.*\:\; 1;
> }
> map $waffableref$waffableua $waffable {
> default 0;
> ~1 1;
> }
>
> # Block shellshock:
> if ($waffable) { return 444; }
>
> # Drop'm from logging:
> map $waffable $loggable {
> default 1;
> ~1 0;
> }
>
> access_log /path/to/access.log combined if=$loggable;

Thanks! I like the combined variables in the 3rd map.

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

2 maps for one 1 variable?

Cole Tierney April 01, 2015 03:08PM

Re: 2 maps for one 1 variable?

GreenGecko April 01, 2015 03:24PM

Re: 2 maps for one 1 variable?

Cole Tierney April 01, 2015 04:04PM

shellshock probing

Cole Tierney April 01, 2015 04:26PM

Re: shellshock probing

mex April 01, 2015 04:50PM

Re: shellshock probing

Cole Tierney April 01, 2015 05:08PM

Re: shellshock probing

mex April 01, 2015 05:17PM

Re: shellshock probing

itpp2012 April 02, 2015 07:21AM

Re: shellshock probing

Cole Tierney April 02, 2015 09:34AM

Re: shellshock probing

B.R. April 02, 2015 10:50AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 325
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready