HttpRefererModule - Revision history

Admin: /* valid_referers */

2012-05-02T19:37:11Z

‎valid_referers

Admin: /* Directives */

2012-04-30T17:40:27Z

‎Directives

VBart: /* References */ Update link to the original documentation

2012-04-21T15:37:49Z

‎References: Update link to the original documentation

MaximDounin at 13:47, 10 November 2010

2010-11-10T13:47:20Z

New page

= Synopsis =
This module makes it possible to block access to the site with the incorrect values of line "Referer" in the request header.

Keep in mind that it is easy to spoof this header; therefore, the purpose of using of this module consists not in 100% blocking of these requests, but in the blocking of the mass flow of requests, made from typical browsers. Also, consider that the typical browser does not always provide a "Referer" header, even for correct requests.

Example
<geshi lang="nginx">
location /photos/ {
valid_referers none blocked www.mydomain.com mydomain.com;

if ($invalid_referer) {
return 403;
}
}
</geshi>

= Directives =
== valid_referers ==
'''syntax:''' ''valid_referers [none|blocked|server_names] ...''

'''default:''' ''no''

'''context:''' ''server, location''

This directive assigns a value of 0 or 1 to the variable <code>$invalid_referer</code> based on the contents of the <code>referer</code> header.

You can use this to help reduce deep-linking from outside sites. If <code>Referer</code> header is not accounted for in the list of <code>valid_referers</code>, then <code>$invalid_referer</code> will be set to 1 (see example above).

The parameters can be as follows:
* <code>none</code> means the absence of "Referer" header.
* <code>blocked</code> means masked <code>Referer</code> header by firewall, for example, "Referer: XXXXXXX".
* server_names is a list of one or more servers. From version 0.5.33 onwards, * wildcards can be used in the server names.

= References =
[http://sysoev.ru/nginx/docs/http/ngx_http_referer_module.html Original Documentation]

← Older revision		Revision as of 15:37, 21 April 2012
Line 34:		Line 34:

	= References =		= References =
−	[http://~~sysoev~~.ru/~~nginx~~/docs/http/ngx_http_referer_module.html Original Documentation]	+	[http://nginx.org/en/docs/http/ngx_http_referer_module.html Original Documentation]

@@ Line 17: / Line 17: @@
 = Directives =
 == valid_referers ==
-<include wikitext nopre src="http://wiki.nginx.org/nginx.org/ngx_http_referer_module/valid_referers.txt" />
+<include wikitext nopre src="http://wiki.nginx.org/nginx.org/http/ngx_http_referer_module/valid_referers.txt" />
 This directive assigns a value of 0 or 1 to the variable <code>$invalid_referer</code> based on the contents of the <code>referer</code> header.

@@ Line 17: / Line 17: @@
 = Directives =
 == valid_referers ==
-'''syntax:''' ''valid_referers [none|blocked|server_names]  ...''
+<include wikitext nopre src="http://wiki.nginx.org/nginx.org/ngx_http_referer_module/valid_referers.txt" />
-−
-'''default:''' ''no''
-−
-'''context:''' ''server, location''
 This directive assigns a value of 0 or 1 to the variable <code>$invalid_referer</code> based on the contents of the <code>referer</code> header.
@@ Line 31: / Line 27: @@
 * <code>blocked</code> means masked <code>Referer</code> header by firewall, for example, "Referer: XXXXXXX".
 * server_names is a list of one or more servers. From version 0.5.33 onwards, * wildcards can be used in the server names.
 = References =
 [http://nginx.org/en/docs/http/ngx_http_referer_module.html Original Documentation]