Nginx Valid Referer - Access Control - Help Wanted

J.R. themadbeaker at
Wed Feb 5 21:40:16 UTC 2020

> I found various code examples to add to the conf file and coupled this
> together and added it to the end of the conf file, but it doesn't work,
> entering a URL directly into the browser serves it

> server {
>    location /radio/ {
>        valid_referers none blocked server_names ~\.mysite\.;
>        if ($invalid_referer) { return 403; }
>    }
> }

If you enter a URL directly into your browser, there will be no
referrer. You have "none" set as a valid value, thus that is why it is

If you only want to accept requests with your server's name in the
referrer field, remove "none" & "blocked"...

More information about the nginx mailing list