Comments (7)
具体是怎样的使用场景呢,可否详细描述一下?
目前Custom Action中的Redirect功能可以对请求进行重定向,这个功能使用的是302,不知道这个功能能不能满足你的需求
from verynginx.
`113.138.236.151 - - [04/Mar/2016:15:01:57 +0800] "GET /tg/ HTTP/1.1" 500 600 "http://hui.x.com" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; MyIE 3.01)Cache-Control: no-store, must-revalidate"
以上是我今天收到的攻击。
就是UA判断是 must-revalidate 有403 ,500,没有301 可以设置到 301 到www.gogole.com 就好了。
from verynginx.
遇到这种攻击推荐使用Filter来block,或者使用browser verify都可以
具体方法是:
1,先定义一个Matcher,里面添加UserAgent作为条件
2,在Filter中添加规则,选择刚才添加的Matcher,选择block(如果想使用301而不是block的话可以在redirect中配置,方法是一样的)
from verynginx.
谢谢。@alexazhou
https://drive.google.com/open?id=0B0GRom_D-MgXOHJla080T2JXdE0
正在被攻击。
from verynginx.
看不到链接里面的文件,不知道你弄好了没有😓
如果还有问题直接给我发邮件吧 [email protected]
from verynginx.
hi .现在又来攻击了...
在 2016年3月4日,下午3:11,AlexaZhou [email protected] 写道:
遇到这种攻击推荐使用Filter来block,或者使用browser verify都可以
具体方法是:
1,先定义一个Matcher,里面添加UserAgent作为条件
2,在Filter中添加规则,选择刚才添加的Matcher,选择block(如果想使用301而不是block的话可以在redirect中配置,方法是一样的)—
Reply to this email directly or view it on GitHub #22 (comment).
from verynginx.
能提一个建议不。对于这样的攻击 只要机器不被拉入黑洞,对于这样的攻击特征,写入iptables或者ufw,直接拒绝,会不会好一点?
On Mar 5, 2016, at 3:22 PM, dog canglaishi [email protected] wrote:
hi .现在又来攻击了...
在 2016年3月4日,下午3:11,AlexaZhou <[email protected] mailto:[email protected]> 写道:
遇到这种攻击推荐使用Filter来block,或者使用browser verify都可以
具体方法是:
1,先定义一个Matcher,里面添加UserAgent作为条件
2,在Filter中添加规则,选择刚才添加的Matcher,选择block(如果想使用301而不是block的话可以在redirect中配置,方法是一样的)—
Reply to this email directly or view it on GitHub #22 (comment).
from verynginx.
Related Issues (20)
- 中文面板的访问路径是什么?/verynginx/index_zh.html报404 HOT 1
- 能够内网离线安装吗
- 如何禁用SQL注入功能?
- 已解决
- 网页登录显示Ajax request failed[status code = 404]
- 封禁时间
- Still maintained?
- 在罕见的情形下,管理面板无法保存修改
- 仅安装verynginx 配置好后报错500 HOT 1
- Docker运行后台新建账号密码或者修改账号密码都无法生效 HOT 1
- 上传 *.txt 403 HOT 1
- 这个怎么卸载? HOT 1
- 访问频率限制使用的什么算法?是固定窗口吗?
- 如何匹配多个参数
- open file failed HOT 1
- failed to run balancer_by_lua*: /opt/verynginx/openresty/lualib/ngx/balancer.lua:118: bad argument #4 to 'ngx_lua_ffi_balancer_set_current_peer' (cannot convert 'nil' to 'int') HOT 1
- 这个项目不维护了? HOT 1
- How can i implement SSL?
- 好像会扫描上传的文件内容导致403,有什么办法让他不扫描文件内容吗? HOT 1
- 后台格式乱了,杂回事? HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from verynginx.