您的位置:首页 > 运维架构 > Apache

限定user_agent -apache

2017-12-06 16:20 141 查看

限定user_agent

当服务器被攻击,并且查看到攻击的user_agent有规律,这时就需要限制user_agent

user_agent配置如下

[root@chy 111.com]# vim /usr/local/apache2.4/conf/extra/httpd-vhosts.conf
<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{HTTP_USER_AGENT}  .*curl.* [NC,OR]
RewriteCond %{HTTP_USER_AGENT}  .*baidu.com.* [NC]
RewriteRule  .*  -  [F]
</IfModule>
(增加如上配置,配置详解如下: <IfModule mod_rewrite.c> (这里需要用到rewrite模块)
RewriteEngine on
RewriteCond %{HTTP_USER_AGENT}  .*curl.* [NC,OR] (OR是或者的意思,或者匹配curl,或者匹配baidu.com)(NC忽略大小写)
RewriteCond %{HTTP_USER_AGENT}  .*baidu.com.* [NC]
RewriteRule  .*  -  [F](F的含义‘forbidden  F’ (force URL to be forbidden)重写为禁止访问
</IfModule>

测试user_agent

[root@chy 111.com]# curl -A "chylinux chylinux" -x192.168.212.10:80 'http://www.111.com/123.php' -I
HTTP/1.1 200 OK
Date: Thu, 03 Aug 2017 22:43:50 GMT
Server: Apache/2.4.27 (Unix) PHP/5.6.30
X-Powered-By: PHP/5.6.30
Content-Type: text/html; charset=UTF-8
(curl -A 指定user_agent)
[root@chy 111.com]# curl  -x192.168.212.10:80 'http://www.111.com/123.php' -I
HTTP/1.1 403 Forbidden
Date: Thu, 03 Aug 2017 22:53:09 GMT
Server: Apache/2.4.27 (Unix) PHP/5.6.30
Content-Type: text/html; charset=iso-8859-1
(这个如果不指定user_agent的结果)
curl -e "http//" (指定)
内容来自用户分享和网络整理,不保证内容的准确性,如有侵权内容,可联系管理员处理 点击这里给我发消息
标签:  限定 user agent