Block specific request pattern !!

shahzaib mushtaq shahzaib.cb at gmail.com
Fri Oct 6 14:17:39 UTC 2017


Hi,

We're serving mp4 files over NGINX with added security hash+ttl but there's
some kind of leechers accessing videos with following pattern but not
getting blocked:

https://domain.com/files/videos/2017/10/04/15071356364fc6b-720.mp4?h=n_Saa78MV6BJTcoRHwHelA&ttl=1507303734&
?*/WhileYouWereSleeping56.mp4*

============================================================

As you can see the highlighted part of request is abnormal, there should be
nothing included after ttl value, requests are supposed to be served with
following pattern :

https://domain.com/files/videos/2017/10/04/15071356364fc6b-720.mp4?h=n_Saa78MV6BJTcoRHwHelA&ttl=1507303734&
?


Is there a way we can block the requests not ending up on ttl value ?

Thanks.
Shahzaib
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20171006/c238e750/attachment.html>


More information about the nginx mailing list