для одного IP открыт доступ.

server {
listen 95.65.37.90:44410;

location /iweb/ {
proxy_pass http://127.0.0.1:8080;
proxy_redirect http://127.0.0.1:8080/ http://95.65.37.90:44410/;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
allow 212.28.89.142;
deny all;

access_log /var/log/iweb/admin_access.log;
error_log /var/log/iweb/admin_error.log notice;
}
}


в браузере:
403 Forbidden
nginx/1.9.5

debug log
-------------
2015/09/29 23:58:15 [debug] 13120#0: epoll: fd:10 ev:0001 d:092F3944
2015/09/29 23:58:15 [debug] 13120#0: post event 092DB7E8
2015/09/29 23:58:15 [debug] 13120#0: timer delta: 106520
2015/09/29 23:58:15 [debug] 13120#0: posted event 092DB7E8
2015/09/29 23:58:15 [debug] 13120#0: delete posted event 092DB7E8
2015/09/29 23:58:15 [debug] 13120#0: accept on 95.65.37.90:44410, ready: 0
2015/09/29 23:58:15 [debug] 13120#0: posix_memalign: 092BBE20:256 @16
2015/09/29 23:58:15 [debug] 13120#0: *95 accept: 212.28.83.142:51604 fd:3
2015/09/29 23:58:15 [debug] 13120#0: *95 event timer add: 3: 60000:451343953
2015/09/29 23:58:15 [debug] 13120#0: *95 reusable connection: 1
2015/09/29 23:58:15 [debug] 13120#0: *95 epoll add event: fd:3 op:1 ev:80002001
2015/09/29 23:58:15 [debug] 13120#0: worker cycle
2015/09/29 23:58:15 [debug] 13120#0: accept mutex locked
2015/09/29 23:58:15 [debug] 13120#0: epoll timer: 60000
2015/09/29 23:58:15 [debug] 13120#0: epoll: fd:10 ev:0001 d:092F3944
2015/09/29 23:58:15 [debug] 13120#0: post event 092DB7E8
2015/09/29 23:58:15 [debug] 13120#0: timer delta: 1
2015/09/29 23:58:15 [debug] 13120#0: posted event 092DB7E8
2015/09/29 23:58:15 [debug] 13120#0: delete posted event 092DB7E8
2015/09/29 23:58:15 [debug] 13120#0: accept on 95.65.37.90:44410, ready: 0
2015/09/29 23:58:15 [debug] 13120#0: posix_memalign: 092BE1D0:256 @16
2015/09/29 23:58:15 [debug] 13120#0: *96 accept: 212.28.83.142:51605 fd:6
2015/09/29 23:58:15 [debug] 13120#0: *96 event timer add: 6: 60000:451343954
2015/09/29 23:58:15 [debug] 13120#0: *96 reusable connection: 1
2015/09/29 23:58:15 [debug] 13120#0: *96 epoll add event: fd:6 op:1 ev:80002001
2015/09/29 23:58:15 [debug] 13120#0: worker cycle
2015/09/29 23:58:15 [debug] 13120#0: accept mutex locked
2015/09/29 23:58:15 [debug] 13120#0: epoll timer: 59999
2015/09/29 23:58:15 [debug] 13120#0: epoll: fd:3 ev:0001 d:092F3A1D
2015/09/29 23:58:15 [debug] 13120#0: *95 post event 092DB848
2015/09/29 23:58:15 [debug] 13120#0: timer delta: 228
2015/09/29 23:58:15 [debug] 13120#0: posted event 092DB848
2015/09/29 23:58:15 [debug] 13120#0: *95 delete posted event 092DB848
2015/09/29 23:58:15 [debug] 13120#0: *95 http wait request handler
2015/09/29 23:58:15 [debug] 13120#0: *95 malloc: 092BE2E8:1024
2015/09/29 23:58:15 [debug] 13120#0: *95 recv: fd:3 407 of 1024
2015/09/29 23:58:15 [debug] 13120#0: *95 reusable connection: 0
2015/09/29 23:58:15 [debug] 13120#0: *95 posix_memalign: 092BE6F0:4096 @16
2015/09/29 23:58:15 [debug] 13120#0: *95 http process request line
2015/09/29 23:58:15 [debug] 13120#0: *95 http request line: "GET /iweb/roles/ HTTP/1.1"
2015/09/29 23:58:15 [debug] 13120#0: *95 http uri: "/iweb/roles/"
2015/09/29 23:58:15 [debug] 13120#0: *95 http args: ""
2015/09/29 23:58:15 [debug] 13120#0: *95 http exten: ""
2015/09/29 23:58:15 [debug] 13120#0: *95 http process request header line
2015/09/29 23:58:15 [debug] 13120#0: *95 http header: "Host: 95.65.37.90:44410"
2015/09/29 23:58:15 [debug] 13120#0: *95 http header: "Connection: keep-alive"
2015/09/29 23:58:15 [debug] 13120#0: *95 http header: "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8"
2015/09/29 23:58:15 [debug] 13120#0: *95 http header: "Upgrade-Insecure-Requests: 1"
2015/09/29 23:58:15 [debug] 13120#0: *95 http header: "User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
2015/09/29 23:58:15 [debug] 13120#0: *95 http header: "Accept-Encoding: gzip, deflate, sdch"
2015/09/29 23:58:15 [debug] 13120#0: *95 http header: "Accept-Language: ru-RU,ru;q=0.8,en-US;q=0.6,en;q=0.4"
2015/09/29 23:58:15 [debug] 13120#0: *95 http header done
2015/09/29 23:58:15 [debug] 13120#0: *95 event timer del: 3: 451343953
2015/09/29 23:58:15 [debug] 13120#0: *95 rewrite phase: 0
2015/09/29 23:58:15 [debug] 13120#0: *95 test location: "/iweb/"
2015/09/29 23:58:15 [debug] 13120#0: *95 using configuration "/iweb/"
2015/09/29 23:58:15 [debug] 13120#0: posted event 092DB848
2015/09/29 23:58:15 [debug] 13120#0: worker cycle
2015/09/29 23:58:15 [debug] 13120#0: accept mutex locked
2015/09/29 23:58:15 [debug] 13120#0: epoll timer: 20000
2015/09/29 23:58:25 [debug] 13120#0: epoll: fd:6 ev:2001 d:092F3A88
2015/09/29 23:58:25 [debug] 13120#0: *96 post event 092DB878
2015/09/29 23:58:25 [debug] 13120#0: timer delta: 9773
2015/09/29 23:58:25 [debug] 13120#0: posted event 092DB878
2015/09/29 23:58:25 [debug] 13120#0: *96 delete posted event 092DB878
2015/09/29 23:58:25 [debug] 13120#0: *96 http wait request handler
2015/09/29 23:58:25 [debug] 13120#0: *96 malloc: 092BE2E8:1024
2015/09/29 23:58:25 [debug] 13120#0: *96 recv: fd:6 0 of 1024
2015/09/29 23:58:25 [info] 13120#0: *96 client closed connection while waiting for request, client: 212.28.83.142, server: 95.65.37.90:44410
2015/09/29 23:58:25 [debug] 13120#0: *96 close http connection: 6
2015/09/29 23:58:25 [debug] 13120#0: *96 event timer del: 6: 451343954
2015/09/29 23:58:25 [debug] 13120#0: *96 reusable connection: 0
2015/09/29 23:58:25 [debug] 13120#0: *96 free: 092BE2E8
2015/09/29 23:58:25 [debug] 13120#0: *96 free: 092BE1D0, unused: 44