Web

Drop clients which do not indicate server names

Sometimes we want to drop clients which do not send valid server_names but probe our Nginx IPs. Using Server Name Indication (SNI) for our virtual hosts we want to drop all clients which do not specify one of them. Typically these clients attempt to walk our IPs for well-known web applications. Let’s call our intercepting server /etc/nginx/sites-available/_default_drop. […]