【CentOS 7架構12】，Apache配置防盜鏈#

shallow丿ove

---

配置防盜鏈

• 經過限制referer來實現防盜鏈的功能
• 配置文件增長以下內容 <Directory /data/wwwroot/www.111.com SetEnvIfNoCase Referer "http://www.111.com" local_ref SetEnvIfNoCase Referer "http://111.com" local_ref SetEnvIfNoCase Referer "^$" local_ref <filesmatch ".(txt|doc|mp3|zip|rar|jpg|gif)"> Order Allow,Deny Allow from env=local_ref </filesmatch> </Directory>
• curl -e "http://www.baidu.com/111.html" #自定義referer

所謂防盜鏈是防止被下載或轉載

[root@localhost ~]# vi /usr/local/apache2.4/conf/extra/httpd-vhosts.conf
     43 #    </Directory>
     44     <Directory /data/wwwwroot/111.com>
     45         SetEnvIfNoCase Referer "http://111.com" local_ref
     46         SetEnvIfNoCase Referer "http://abc.com" local_ref
     47         #SetEnvIfNoCase Referer "^$" local_ref
     48         <FilesMatch "\.(txt|doc|mp3|zip|rar|jpg|gif|png)">
     49                 Order Allow,Deny
     50                 Allow from env=local_ref
     51         </FilesMatch>
     52     </Directory>     53     ErrorLog "logs/111.com-error_log"     54     SetEnvIf Request_URI ".*\.gif$" img     55     SetEnvIf Request_URI ".*\.jpg$" img     56     SetEnvIf Request_URI ".*\.png$" img     57     SetEnvIf Request_URI ".*\.bmp$" img     58     SetEnvIf Request_URI ".*\.swf$" img

SetEnvIfNoCase Referer白名單 Order Allow,Deny和Allow from env=local_ref爲訪問控制

[root@localhost ~]# /usr/local/apache2.4/bin/apachectl -t
Syntax OK
[root@localhost ~]# /usr/local/apache2.4/bin/apachectl graceful

[root@localhost ~]# vi /usr/local/apache2.4/conf/extra/httpd-vhosts.conf
     44     <Directory /data/wwwwroot/111.com>
     45         SetEnvIfNoCase Referer "http://111.com" local_ref
     46         SetEnvIfNoCase Referer "http://abc.com" local_ref
     47         SetEnvIfNoCase Referer "http://ask.apelearn.com/question/17394" local_ref
     48         #SetEnvIfNoCase Referer "^$" local_ref
     49         <FilesMatch "\.(txt|doc|mp3|zip|rar|jpg|gif|png)">
     50                 Order Allow,Deny
     51                 Allow from env=local_ref
     52         </FilesMatch> 
     53     </Directory>
     54     ErrorLog "logs/111.com-error_log"
     55     SetEnvIf Request_URI ".*\.gif$" img
     56     SetEnvIf Request_URI ".*\.jpg$" img
     57     SetEnvIf Request_URI ".*\.png$" img
     58     SetEnvIf Request_URI ".*\.bmp$" img
     59     SetEnvIf Request_URI ".*\.swf$" img

若想不使用referer狀況運行顯示，則將SetEnvIfNoCase Referer "^$" local_ref取消註釋

[root@localhost ~]# curl -e "http://www.qq.com/111.txt" -x 127.0.0.1:80 111.com/1111.png -I
HTTP/1.1 404 Not Found
Date: Sat, 04 Nov 2017 14:35:24 GMT
Server: Apache/2.4.29 (Unix) PHP/5.6.30
Content-Type: text/html; charset=iso-8859-1

[root@localhost ~]# curl -e "http://www.111.com/111.txt" -x 127.0.0.1:80 111.com/1111.png -I
HTTP/1.1 200 OK
Date: Sun, 05 Nov 2017 07:49:48 GMT
Server: Apache/2.4.29 (Unix) PHP/5.6.30
Last-Modified: Sun, 05 Nov 2017 07:49:48 GMT
ETag: W/"99ad-560d9271dfe00"
Accept-Ranges: bytes
Content-Length: 39341
Content-Type: image/png

[root@localhost ~]# tail /usr/local/apache2.4/logs/111.com-access_20171105.log 
192.168.9.1 - - [05/Nov/2017:14:59:03 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36"
192.168.9.1 - - [05/Nov/2017:14:59:03 +0800] "GET /1111.pn HTTP/1.1" 404 205 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)"
192.168.9.1 - - [05/Nov/2017:15:41:00 +0800] "GET /user.php HTTP/1.1" 200 10 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)"
192.168.9.1 - - [05/Nov/2017:15:42:41 +0800] "GET /user.php HTTP/1.1" 200 10 "http://ask.apelearn.com/question/17394" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)"

若域名是帶二級域名的

SetEnvIfNoCase Referer "^http://.*\.yourdomin\.com" local_ref
SetEnvIfNoCase Referer ".*\.yourdomin\.com" local_ref

第二行就是通配