Nginx block specific directory to one country

geoipnginx

I'm using Nginx and GeoIP to block certain countries (to the whole site).
Is it possible to block just one specific directory?

This way:

www.domain.com/
Everyone can access
www.domain.com/ES
Only spanish IP's can access, no one else.
www.domain.com/OTHER
Everyone can access OTHER except China.

(Countries used merely as an example)
Thank you.

And yes, I am aware that GeoIP isn't always accurate, but helps a lot.

Best Answer

Use the ngx_http_access_module and ngx_http_geo_module.

location /ES {
    # Enter the Allowed IP blocks
    allow x.x.x.x;
    deny all;
}
location /OTHER {
    # Enter the Denied IP blocks
    deny x.x.x.x.;
    allow all;
}

Source:

http://nginx.org/en/docs/http/ngx_http_access_module.html http://nginx.org/en/docs/http/ngx_http_geo_module.html

Correct way in new versions of nginx

Turn out my first answer to this question was correct at certain time, but it turned into another pitfall - to stay up to date please check Taxing rewrite pitfalls

I have been corrected by many SE users, so the credit goes to them, but more importantly, here is the correct code:

server {
       listen         80;
       server_name    my.domain.com;
       return         301 https://$server_name$request_uri;
}

server {
       listen         443 ssl;
       server_name    my.domain.com;
       # add Strict-Transport-Security to prevent man in the middle attacks
       add_header Strict-Transport-Security "max-age=31536000" always; 

       [....]
}

Best Answer

Related Solutions

Security – Relatively easy way to block all traffic from a specific country

NGINX Redirect – How to Rewrite All HTTP Requests to HTTPS While Maintaining Sub-Domain

Correct way in new versions of nginx

Related Topic