Deny ips, and pick ips from a file

aris · October 11, 2012, 7:56am

Hi all,

I need to deny users by ip. I assume we need to do something like this

location / {

block one workstation

deny 192.168.1.1;

allow 192.168.1.0/24;

deny all;

}

But how can I pass on the list of ips from a file? A file which will get
udated from time to time.

Can I pass the ips something like this

deny /tmp/iplist.txt;

Will Nginx refresh the ip list in memory if the file gets changed?

-Quintin

Quintin_P · October 11, 2012, 12:04pm

On 11.10.2012 09:50, Quintin P. wrote:

allow 192.168.1.0/24 http://192.168.1.0/24;
Can I pass the ips something like this

deny /tmp/iplist.txt;

If list of IP to block is really big, then better to use geo module
instead
allow/deny: Module ngx_http_geo_module

geo $denyed_host {
default 1;
include /tmp/iplist.txt;
}

…

if ($denyed_host) {
return 403;
}

iplist.txt should contain lines like:

192.168.1.0/24 0;
192.168.1.1/32 1;

After update of /tmp/iplist.txt you should reconfigure nginx (e. g. run
nginx -s
reload).

–
Anton Y.

Quintin_P · October 11, 2012, 12:56pm

Posted at Nginx Forum:

Quintin_P · October 13, 2012, 7:22am

Thanks Antonio. This bonus is so good.

Quintin_P · October 11, 2012, 1:03pm

On 11 Out 2012 12h55 CEST, [email protected] wrote:

Also a shameless plug - I leave the server handling to be done à la
carte

This creates a file to be used by the geo directive.

— appa

Posted at Nginx Forum: