Anonymous User
September 18, 2009 10:10PM
What 0.7.62 variable gives the full request line?
We need to defeat proxying attempts.
Here's what we find in access logs:

Good: GET /valid HTTP/1.1
Evil: GET http://www.externaldomain.com/ HTTP/1.1

The proxy attempt should get a 444, but right now
redirects to our home page. We want to use 444
to conserve CPU and bandwidth. We use ^http
but it fails:

if ($request_uri ~* (^http.*|.*proxy.*) ) {
return 444;
}

--
http://www.fastmail.fm - Or how I learned to stop worrying and
love email again
Subject Author Posted

Full request line variable

Anonymous User September 18, 2009 10:10PM

Re: Full request line variable

Joshua Zhu September 18, 2009 10:58PM

Re: Full request line variable

Igor Sysoev September 19, 2009 01:46AM

Re: Full request line variable

Igor Sysoev September 19, 2009 01:48AM

Re: Full request line variable

Wohbah September 20, 2009 02:30AM

Re: Full request line variable

Igor Sysoev September 20, 2009 04:28AM

Re: Full request line variable

Wohbah September 20, 2009 10:58PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 200
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready