nginx处理非法访问

1. 找到nginx默认配置文件如下

cd /etc/nginx/sites-enabled

2. 生成自签名证书

sudo mkdir -p /etc/nginx/ssl
sudo openssl req -x509 -nodes -days 3650 \
    -newkey rsa:2048 \
    -keyout /etc/nginx/ssl/dummy.key \
    -out /etc/nginx/ssl/dummy.crt \
    -subj "/CN=invalid"

3. 更改相关配置,放开默认监听配置,更改默认监听跳转路径

server {
	    listen 80 default_server;
	    # 可选项：使用自签名证书避免浏览器SSL警告
    	listen 443 ssl default_server;
	    ssl_certificate /etc/nginx/ssl/dummy.crt;
    	ssl_certificate_key /etc/nginx/ssl/dummy.key;
        return 444; 
}

4. 重启nginx,测试无误,相关ip请求就会被拦截

nginx -t
nginx -s reload