{ yeah : 必须哒 } No place to place should record our youth?

8Sep/100

nginx/apache 中防止绑定别人恶意解析过来的域名

转至:http://salogs.com/2010/01/nginxapache-%E4%B8%AD%E9%98%B2%E6%AD%A2%E7%BB%91%E5%AE%9A%E5%88%AB%E4%BA%BA%E6%81%B6%E6%84%8F%E8%A7%A3%E6%9E%90%E8%BF%87%E6%9D%A5%E7%9A%84%E5%9F%9F%E5%90%8D/

 

最近为了符合国家某某部门的需求,需要禁止别人而已解析非本站的域名到本站,需要做一些域名绑定的操作,故对公司各个项目做了域名绑定处理。

nginx

server {
    listen 80 default;
    root /dev/null;
    location / {
return 404;
        access_log off;
}
}

apache

# vhost.conf

<Virtualhost *:80>
ServerName  joinus.jobkoo.com
ServerAlias wanmei.jobkoo.com,test.jobkoo.com,*.jobkoo.com
  RewriteEngine on
# 只要不是下面列出的域名均报错指向error.html文件,这个文件并不存在,因此会报404
# 错误。正好符合国家要求
  RewriteCond %{HTTP_HOST} !^joinus|wanmei|test|demo\.jobkoo\.com [NC]
  RewriteRule ^/(.*) /error.html [L]
# 判断Port是否为443,不是的话跳转到443端口
  RewriteCond %{SERVER_PORT} !^443$
  RewriteRule ^/?(.*)$ https://%{SERVER_NAME}%{REQUEST_URI} [L,R]
DocumentRoot "/data/web/www"
</VirtualHost>

检测是否配置成功

curl –I  domain

Posted by ofeng

Comments (0) Trackbacks (0)

No comments yet.


Leave a comment

(required)

No trackbacks yet.