【CentOS 7架構12】,Apache配置防盜鏈#
阿新 • • 發佈:2019-07-04
shallow丿ove
配置防盜鏈
- 通過限制referer來實現防盜鏈的功能
- 配置檔案增加如下內容 <Directory /data/wwwroot/www.111.com SetEnvIfNoCase Referer "http://www.111.com" local_ref SetEnvIfNoCase Referer "http://111.com" local_ref SetEnvIfNoCase Referer "^$" local_ref <filesmatch ".(txt|doc|mp3|zip|rar|jpg|gif)"> Order Allow,Deny Allow from env=local_ref </filesmatch> </Directory>
- curl -e "http://www.baidu.com/111.html" #自定義referer
所謂防盜鏈是防止被下載或轉載
[root@localhost ~]# vi /usr/local/apache2.4/conf/extra/httpd-vhosts.conf 43 # </Directory> 44 <Directory /data/wwwwroot/111.com> 45 SetEnvIfNoCase Referer "http://111.com" local_ref 46 SetEnvIfNoCase Referer "http://abc.com" local_ref 47 #SetEnvIfNoCase Referer "^$" local_ref 48 <FilesMatch "\.(txt|doc|mp3|zip|rar|jpg|gif|png)"> 49 Order Allow,Deny 50 Allow from env=local_ref 51 </FilesMatch> 52 </Directory> 53 ErrorLog "logs/111.com-error_log" 54 SetEnvIf Request_URI ".*\.gif$" img 55 SetEnvIf Request_URI ".*\.jpg$" img 56 SetEnvIf Request_URI ".*\.png$" img 57 SetEnvIf Request_URI ".*\.bmp$" img 58 SetEnvIf Request_URI ".*\.swf$" img
SetEnvIfNoCase Referer白名單 Order Allow,Deny和Allow from env=local_ref為訪問控制
[root@localhost ~]# /usr/local/apache2.4/bin/apachectl -t
Syntax OK
[root@localhost ~]# /usr/local/apache2.4/bin/apachectl graceful
[root@localhost ~]# vi /usr/local/apache2.4/conf/extra/httpd-vhosts.conf 44 <Directory /data/wwwwroot/111.com> 45 SetEnvIfNoCase Referer "http://111.com" local_ref 46 SetEnvIfNoCase Referer "http://abc.com" local_ref 47 SetEnvIfNoCase Referer "http://ask.apelearn.com/question/17394" local_ref 48 #SetEnvIfNoCase Referer "^$" local_ref 49 <FilesMatch "\.(txt|doc|mp3|zip|rar|jpg|gif|png)"> 50 Order Allow,Deny 51 Allow from env=local_ref 52 </FilesMatch> 53 </Directory> 54 ErrorLog "logs/111.com-error_log" 55 SetEnvIf Request_URI ".*\.gif$" img 56 SetEnvIf Request_URI ".*\.jpg$" img 57 SetEnvIf Request_URI ".*\.png$" img 58 SetEnvIf Request_URI ".*\.bmp$" img 59 SetEnvIf Request_URI ".*\.swf$" img
若想不使用referer情況執行顯示,則將SetEnvIfNoCase Referer "^$" local_ref取消註釋
[root@localhost ~]# curl -e "http://www.qq.com/111.txt" -x 127.0.0.1:80 111.com/1111.png -I
HTTP/1.1 404 Not Found
Date: Sat, 04 Nov 2017 14:35:24 GMT
Server: Apache/2.4.29 (Unix) PHP/5.6.30
Content-Type: text/html; charset=iso-8859-1
[root@localhost ~]# curl -e "http://www.111.com/111.txt" -x 127.0.0.1:80 111.com/1111.png -I
HTTP/1.1 200 OK
Date: Sun, 05 Nov 2017 07:49:48 GMT
Server: Apache/2.4.29 (Unix) PHP/5.6.30
Last-Modified: Sun, 05 Nov 2017 07:49:48 GMT
ETag: W/"99ad-560d9271dfe00"
Accept-Ranges: bytes
Content-Length: 39341
Content-Type: image/png
[root@localhost ~]# tail /usr/local/apache2.4/logs/111.com-access_20171105.log
192.168.9.1 - - [05/Nov/2017:14:59:03 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
192.168.9.1 - - [05/Nov/2017:14:59:03 +0800] "GET /1111.pn HTTP/1.1" 404 205 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)"
192.168.9.1 - - [05/Nov/2017:15:41:00 +0800] "GET /user.php HTTP/1.1" 200 10 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)"
192.168.9.1 - - [05/Nov/2017:15:42:41 +0800] "GET /user.php HTTP/1.1" 200 10 "http://ask.apelearn.com/question/17394" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)"
若域名是帶二級域名的
SetEnvIfNoCase Referer "^http://.*\.yourdomin\.com" local_ref
SetEnvIfNoCase Referer ".*\.yourdomin\.com" local_ref
第二