Full request line variable
2947779 at deadaddress.com
2947779 at deadaddress.com
Sat Sep 19 06:02:02 MSD 2009
What 0.7.62 variable gives the full request line?
We need to defeat proxying attempts.
Here's what we find in access logs:
Good: GET /valid HTTP/1.1
Evil: GET http://www.externaldomain.com/ HTTP/1.1
The proxy attempt should get a 444, but right now
redirects to our home page. We want to use 444
to conserve CPU and bandwidth. We use ^http
but it fails:
if ($request_uri ~* (^http.*|.*proxy.*) ) {
return 444;
}
--
http://www.fastmail.fm - Or how I learned to stop worrying and
love email again
More information about the nginx
mailing list