Shulou(Shulou.com)06/02 Report--

This article mainly shows you how Nginx restricts IP access to certain pages. The content is simple and easy to understand. I hope you can learn it. After learning, there will definitely be gains. Let's take a look at it together.

1. To prohibit all IP access to a1.htm a2.htm a3.htm, these three pages can be written like this in location

location ~* /(a1.htm|a2.htm|a3.htm)$ { deny all; condition………;}

2. Only the specified IP is allowed to access the three pages a1.htm a2.htm a3.htm, and access to other IPs is denied.

location ~* /(a1.htm|a2.htm|a3.htm)$ { allow 10.0.0.2; deny all; condition………;}

This setting only allows hosts with ip address 10.0.0.2 to access these three pages, and all other ip addresses are rejected.

Other cases can be analogized.

For example, I need to specify that I can only access the info.php page with the ip 8.8.8.8. Then you can add the following configuration to nginx-server, you can

If you visit the info.php page other than 8.8.8.8, return 403

You need to add a jump address, proxy_pass http://192.168.1.110:10480; otherwise, you will get a 404 error.

location ~/info.php$ { if ($remote_addr != '8.8.8.8' ) { return 403; } proxy_pass http://192.168.1.110:10480; }}

It can also be added to the server code.

location ~/info.php$ { allow 8.8.8.8; deny all; condition………;}

the same effect

How do I disable ip or ip segments?

The following instructions assume that nginx directories are in/usr/local/nginx/

First, create a configuration file for IP blocking, then vi blockiP.conf edit this file, and enter the IP to be blocked in the file.

deny 1.2.3.4;deny 91.212.45.0/24;deny 91.212.65.0/24;

Then save this file, open the nginx.conf file, and add the following line to the http configuration section:

include blockips.conf;

Save the nginx.conf file and test whether the current nginx configuration file is legal:

/usr/local/nginx/sbin/nginx -t

If there is no problem with the configuration, it will output:

the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok

configuration file /usr/local/nginx/conf/nginx.conf test is successful

If there is a problem with the configuration, you need to check where there is a syntax problem. If there is no problem, you need to execute the following command to let nginx reload the configuration file.

/usr/local/nginx/sbin/nginx -s reload

Allow only certain IPs to access pages, or prohibit certain IPs from accessing pages

server_name es.mila66.com; location / { include /etx/nginx/all/ip.conf; deny all;

File format in ip.conf:

allow 192.168.1.11;

allow 192.168.1.12;

This allows only certain IPs to access the page.

If you want to disable certain IP addresses, you only need to modify the following: Change allow to deny.

server_name es.mila66.com; location / { include /etx/nginx/all/ip.conf; allow all;

File format in ip.conf:

deny 192.168.1.11;

deny 192.168.1.12;

nginx -s reload

Restart the server.

The above is about how Nginx restricts IP access to certain pages. If you have learned knowledge or skills, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.