{"id":1704,"date":"2023-03-25T23:03:59","date_gmt":"2023-03-25T15:03:59","guid":{"rendered":"https:\/\/www.appblog.cn\/?p=1704"},"modified":"2023-04-23T21:41:22","modified_gmt":"2023-04-23T13:41:22","slug":"nginx-config-restricts-ip-access","status":"publish","type":"post","link":"https:\/\/www.appblog.cn\/index.php\/2023\/03\/25\/nginx-config-restricts-ip-access\/","title":{"rendered":"Nginx\u914d\u7f6e\u9650\u5236IP\u8bbf\u95ee"},"content":{"rendered":"

\u6709\u65f6\u6211\u4eec\u9700\u8981\u9488\u5bf9\u5c4f\u853d\u67d0\u4e9b\u6076\u610f\u7684IP\u8bbf\u95ee\u6211\u4eec\u7684\u7f51\u7ad9\uff0c\u6216\u8005\u9650\u5236\u4ec5\u4ec5\u67d0\u4e9b\u767d\u540d\u5355IP\u624d\u80fd\u8bbf\u95ee\u6211\u4eec\u7684\u7f51\u7ad9\u3002\u8fd9\u65f6\u5019\u6211\u4eec\u5c31\u53ef\u4ee5\u5728Nginx\u4e2d\u901a\u8fc7\u7b80\u5355\u7684\u914d\u7f6e\u6765\u8fbe\u5230\u76ee\u7684\u3002<\/p>\n

\u76f8\u5173\u914d\u7f6e\u8bed\u53e5<\/h2>\n

\uff081\uff09\u5c4f\u853d\u5355\u4e2aip\u8bbf\u95ee<\/p>\n

<\/p>\n

# \u683c\u5f0f\uff1a deny ip;\ndeny 123.68.23.5;<\/code><\/pre>\n
\uff082\uff09\u5141\u8bb8\u5355\u4e2aip\u8bbf\u95ee<\/p>\n
# \u683c\u5f0f\uff1a allow ip;\nallow 123.68.25.6;<\/code><\/pre>\n
\uff083\uff09\u5c4f\u853d\u6240\u6709ip\u8bbf\u95ee<\/p>\n
deny all;<\/code><\/pre>\n
\uff084\uff09\u5141\u8bb8\u6240\u6709ip\u8bbf\u95ee<\/p>\n
allow all;<\/code><\/pre>\n
\uff085\uff09\u5c4f\u853dip\u6bb5\u8bbf\u95ee<\/p>\n
# deny ip\/mask\n# \u5c4f\u853d172.12.62.0\u5230172.45.62.255\u8bbf\u95ee\u7684\u547d\u4ee4 \ndeny 172.12.62.0\/24;<\/code><\/pre>\n
\uff086\uff09\u5141\u8bb8ip\u6bb5\u8bbf\u95ee<\/p>\n
# allow ip\/mask\n# \u5c4f\u853d172.102.0.0\u5230172.102.255.255\u8bbf\u95ee\u7684\u547d\u4ee4 \nallow 172.102.0.0\/16;<\/code><\/pre>\n
\u914d\u7f6e\u8bf4\u660e<\/h2>\n
\uff081\uff09\u53ef\u65b0\u5efa\u4e00\u4e2a\u914d\u7f6e\u6587\u4ef6\uff0c\u5982blockip.conf<\/code>\u3002\u5728\u5176\u4e2d\u7f16\u5199\u76f8\u5173\u7684ip\u9650\u5236\u8bed\u53e5\uff0c\u7136\u540e\u5728nginx.conf<\/code>\u4e2d\u52a0\u5165\u5982\u4e0b\u914d\u7f6e\uff1a<\/p>\n
# \u914d\u7f6eip\u9650\u5236\u7b56\u7565\ninclude blockip.conf; <\/code><\/pre>\n
\uff082\uff09Nginx\u4f1a\u6839\u636e\u914d\u7f6e\u6587\u4ef6\u4e2d\u7684\u8bed\u53e5\uff0c\u4ece\u4e0a\u81f3\u4e0b\u4f9d\u6b21\u5224\u65ad\u3002\u56e0\u6b64\uff0c\u5199\u5728\u524d\u9762\u7684\u8bed\u53e5\u53ef\u80fd\u4f1a\u5c4f\u853d\u540e\u7eed\u7684\u8bed\u53e5<\/p>\n
\u9664\u90e8\u5206ip\u767d\u540d\u5355\u5916\uff0c\u5c4f\u853d\u6240\u6709ip\u7684\u9519\u8bef\u793a\u4f8b<\/strong><\/p>\n
deny all; # \u8be5\u8bed\u53e5\u5df2\u7ecf\u7981\u6b62\u6240\u6709ip\u7684\u8bbf\u95ee\uff0c\u540e\u7eed\u7684\u914d\u7f6e\u4e0d\u4f1a\u751f\u6548\nallow 123.45.25.6;\nallow 123.68.52.125;\nallow 123.125.25.106;<\/code><\/pre>\n
\u6b63\u786e\u793a\u4f8b<\/strong><\/p>\n
# \u5141\u8bb8\u90e8\u5206ip\u8bbf\u95ee\nallow 123.45.25.6;\nallow 123.68.52.125;\nallow 123.125.25.106;\n # \u7981\u6b62\u5176\u4f59ip\u8bbf\u95ee\ndeny all; <\/code><\/pre>\n
\uff083\uff09\u5c4f\u853d\u7b56\u7565\u6587\u4ef6\u53ef\u4ee5\u653e\u5728http<\/code>, server<\/code>, location<\/code>, limit_except<\/code>\u8bed\u53e5\u5757\u4e2d\uff0c\u53ef\u4ee5\u6839\u636e\u9700\u8981\u5408\u7406\u7684\u914d\u7f6e\u3002<\/p>\n
    \n
  • http<\/code>: Nginx\u4e2d\u6240\u6709\u670d\u52a1\u8d77\u6548<\/li>\n
  • server<\/code>: \u6307\u5b9a\u7684\u670d\u52a1\u8d77\u6548<\/li>\n
  • location<\/code>: \u6ee1\u8db3\u7684location\u4e0b\u8d77\u6548<\/li>\n
  • limit_except<\/code>: \u6307\u5b9a\u7684http\u65b9\u6cd5\u8c13\u8bcd\u8d77\u6548<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
    \u6709\u65f6\u6211\u4eec\u9700\u8981\u9488\u5bf9\u5c4f\u853d\u67d0\u4e9b\u6076\u610f\u7684IP\u8bbf\u95ee\u6211\u4eec\u7684\u7f51\u7ad9\uff0c\u6216\u8005\u9650\u5236\u4ec5\u4ec5\u67d0\u4e9b\u767d\u540d\u5355IP\u624d\u80fd\u8bbf\u95ee\u6211\u4eec\u7684\u7f51\u7ad9\u3002\u8fd9\u65f6\u5019\u6211\u4eec\u5c31\u53ef […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[332],"tags":[],"class_list":["post-1704","post","type-post","status-publish","format-standard","hentry","category-nginx"],"_links":{"self":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/posts\/1704","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/comments?post=1704"}],"version-history":[{"count":0,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/posts\/1704\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/media?parent=1704"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/categories?post=1704"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/tags?post=1704"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}