nginx hotlinking protection issue with wildcards !!

[Maxim Dounin]

Hello!

On Fri, May 09, 2014 at 03:14:35AM +0500, shahzaib shahzaib wrote:

> hello,
> 
>      I am using hotlinking protection for mp4 files but found that whenever
> i use wildcard in hot-linking, it doesn't work properly and videos even
> play on the domain where it doesn't suppose to be buffer.
> 
> My mp4 config :
> 
> location ~ \.(mp4)$ {
>                 mp4;
>                 root /var/www/html/tunefiles;
>                 expires 7d;
>        valid_referers none blocked server_names mydomain *.mydomain *.
> facebook.com *.twitter.com *.seconddomain.com *.thirddomain.com
> fourthdomain.com *.fourthdomain.com fifthdomain.com www.fifthdomain.com
> embed.fifthdomain.com;
>               if ($invalid_referer) {
>                     return   403;
> }
> }
> 
> The mp4 file is buffering on the following domain which doesn't suppose to
> be in valid_referers variable.
> 
> http://www.tusnovelas.net/telenovela/lo-que-la-vida-me-robo-capitulo-138
> 
> Nginx-1.4.7
> 
> Help will be highly appreciated.

Try looking into Referer header of a request, as well as at server 
names of a particular server{} block (as you use "valid_referers 
server_names").

-- 
Maxim Dounin
http://nginx.org/