The conditions in the config do not work, I can not understand why

Question

Nginx

There is a flood on the server. There are such lines in the logs, only the IP addresses are different
88.81.228.6 — - [06/Sep/2012:12:53:37 +0400] "GET / HTTP/1.0" 200 36271 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US)" "-" | "-"

I want to filter this case with nginx

server {
    .....
    set $add 1;
    set $ban '';

    ###### Rule 1 ########
    if ($http_referer = '-' ) {
        set $ban $ban$add;
    }
    if ($request_uri = '/') {
        set $ban $ban$add;
    }

    if ($http_user_agent = 'Mozilla\/5\.0 \(Windows\; U\; Windows NT 6\.1\; en\-US\)') {
        set $ban $ban$add;
    }

    if ($ban = 111) {
        return 444;
    }
    ######################
    ......
}

But requests still pass through nginx. How to write conditions?

PS: Also tell me how to set the maximum page access per unit of time in iptables

Answer 1

Maybe because $ban is 11?

if ($http_user_agent = 'Mozilla\/5\.0 \(Windows\; U\; Windows NT 6\.1\; en\-US\)') {
        set $ban $ban$add;
}

There is no need to screen here.

Answer 2

A bit off topic, but you can use the nginx.org/ru/docs/http/ngx_http_limit_req_module.html module

Answer 3

The simplest option is to add the debug_connection BOT_IP directive; in the events context and see the debug log.

Answer 4

Does anyone else have any idea why the conditions don't work? tried everything I think

Answer 5

strange, that's how it worked

   if ($http_referer = "" ) {
        set $ban $ban$add;
    }
    if ($request_uri = "/") {
        set $ban $ban$add;
    }

    if ($http_user_agent = "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US)") {
        set $ban $ban$add;
    }

    if ($ban = 111) {
        return 444;
    }