ÓÔÒÁÎÎÏÓÔÉ Ó access module

[Dev <evdanil@xxxxxxxxx>]

ÄÏÂÒÙÊ ÄÅÎØ,

ÐÙÔÁÀÓØ ÎÁÓÔÒÏÉÔØ ÏÇÒÁÎÉÞÅÎÉÅ ÄÏÓÔÕÐÁ Ë ÌÏËÅÊÛÅÎÕ ÐÏ ÁÊÐÉ, × ÌÏÇÉ nginx ÐÉÛÅÔ ÞÔÏ ÄÏÓÔÕÐ ÚÁËÒÙÔ, Á × ÂÒÁÕÚÅÒÅ Ñ ÐÏÌÕÞÁÀ ÎÏÒÍÁÌØÎÕÀ ÓÔÒÁÎÉÃÕ? ËÁË ÂÕÄÔÏ Ñ ÏÂÒÁÝÁÀÓØ Ó ÒÁÚÒÅÛÅÎÎÏÇÏ ÁÊÐÉ, ÐÏÄÓËÁÖÉÔÅ Ó ÞÅÍ ÜÔÏ ÍÏÖÅÔ ÂÙÔØ Ó×ÑÚÁÎÏ?

ÌÏÇ:

2011/03/18 13:10:40 [error] 5118#0: *2327160 access forbidden by rule, client: 175.72.61.17, server: www.abc.com, request: "GET /cksys/h2/apc.php HTTP/1.1", host: "www.abc.com"

# /usr/local/nginx/sbin/nginx -v

nginx version: nginx/0.6.39

ËÏÎÆÉÇ:

šš šserver {

šš š š šlisten š š š 195.149.105.35;

šš š š šserver_name šwww.abc.com abc.com abc.ru www.abc.ru;

šš š š šcharset utf-8;

šš š š šaccess_log off;

šš š š šlocation / {

šš š š š š š proxy_pass š š š š http://127.0.0.1:8080;

šš š š š š š proxy_redirect š š off;

šš š š š š š proxy_set_header š Host š š š š š š $host;

šš š š š š š proxy_set_header š X-Real-IP š š š š$remote_addr;

šš š š š š š #proxy_set_header š X-Forwarded-For š$proxy_add_x_forwarded_for;

šš š š š š š client_max_body_size š š š 10m;

šš š š š š š client_body_buffer_size š š128k;

šš š š š š š proxy_connect_timeout š š š60;

šš š š š š š proxy_send_timeout š š š š 90;

šš š š š š š proxy_read_timeout š š š š 90;

šš š š š š š proxy_buffer_size š š š š š4k;

šš š š š š š proxy_buffers š š š š š š š4 32k;

šš š š š š š proxy_busy_buffers_size š š64k;

šš š š š š š proxy_temp_file_write_size 64k;

šš š š š š š proxy_intercept_errors š š on;

šš š š š }

šš š š šlocation /cksys/ {

šš š š š š š proxy_pass š š š š http://127.0.0.1:8080;

šš š š š š š proxy_redirect š š off;

šš š š š š š proxy_set_header š Host š š š š š š $host;

šš š š š š š proxy_set_header š X-Real-IP š š š š$remote_addr;

šš š š š š š #proxy_set_header š X-Forwarded-For š$proxy_add_x_forwarded_for;

šš š š š š š client_max_body_size š š š 10m;

šš š š š š š client_body_buffer_size š š128k;

šš š š š š š proxy_connect_timeout š š š60;

šš š š š š š proxy_send_timeout š š š š 90;

šš š š š š š proxy_read_timeout š š š š 90;

šš š š š š š proxy_buffer_size š š š š š4k;

šš š š š š š proxy_buffers š š š š š š š4 32k;

šš š š š š š proxy_busy_buffers_size š š64k;

šš š š š š š proxy_temp_file_write_size 64k;

šš š š š š š proxy_intercept_errors š š off;

šš š š š š š root š /home/virtual/abc.com/html/;

šš š š š š š error_log /usr/local/nginx/logs/apc_error.log;

šš š š š š š access_log /usr/local/nginx/logs/apc_access.log;

šš š š š š šš

šš š š š š š allow 195.195.195.195;

šš š š š š š allow 10.1.2.0/24;

šš š š š š š deny all;

šš š š š š šš

šš š š šlocation ~* /cksys/h1/+ {

šš š š š š š proxy_pass š š š š http://127.0.0.1:8080;š

šš š š š š š proxy_intercept_errors š š on;

šš š š š }

šš š š šlocation ~* /cksys/h2/+ {

šš š š š š š proxy_pass š š š š http://10.1.2.2:80;

šš š š š š š proxy_intercept_errors š š on;

šš š š š }

šš š š šlocation ~* /cksys/h3/+ {

šš š š š š š proxy_pass š š š š http://10.1.2.3:80;

šš š š š š š proxy_intercept_errors š š on;

šš š š š }

šš š š š}

šš š š šlocation ~* ^.+\.(jpg|jpeg|gif|png|ico|css|zip|tgz|gz|rar|bz2|doc|xls|exe|pdf|ppt|js|rtf|swf|txt|tar|mid|midi|wav|bmp|htm|html)$ {

šš š š š š š root š /home/virtual/abc.com/html/;

šš š š š }

šš š š š error_page š403 š š š š š š š š/403.php;

šš š š š error_page š404 š š š š š š š/404.php;

šš š š š# redirect server error pages to the static page /50x.html

šš š š š#

šš š š šerror_page š 500 502 503 504 š/50x.html;

šš š š šlocation = /50x.html {

šš š š š š šroot html;

šš š š š}

šš š š šlocation ~ /\.ht {

šš š š š š šdeny šall;

šš š š š}

šš š}

ó Õ×ÁÖÅÎÉÅÍ,

å×ÇÅÎÉÊ.

_______________________________________________
nginx-ru mailing list
nginx-ru@xxxxxxxxx
http://nginx.org/mailman/listinfo/nginx-ru