Full request line variable

2947779 at deadaddress.com 2947779 at deadaddress.com
Sat Sep 19 06:02:02 MSD 2009


What 0.7.62 variable gives the full request line?
We need to defeat proxying attempts.
Here's what we find in access logs:

Good:   GET /valid HTTP/1.1
Evil:   GET http://www.externaldomain.com/ HTTP/1.1

The proxy attempt should get a 444, but right now
redirects to our home page.  We want to use 444
to conserve CPU and bandwidth.  We use ^http
but it fails:

if ($request_uri ~* (^http.*|.*proxy.*) ) {
  return 444;
}

-- 
http://www.fastmail.fm - Or how I learned to stop worrying and
                          love email again






More information about the nginx mailing list