nginx domain regex to include wildcards

Question

How do I deny illegal host headers besides all subdomains (wildcard solution) and the main domain with nginx? When using this code below all of the subdomains stop working.

if ($host !~* ^(domain.com|*.domain.com)$ ) {
    return 444;
}

My server name is:

server_name domain.com *.domain.com;

How can this be accomplished?

^ means "start of string". ^domain.com will NOT match foo.domain.com, because domain.com isn't at the start of the string. |*. will also not work. * is "zero or more of the previous", but you have no previous | is not a matching character, it's the regex equivalent of "or". — Marc B
– Marc B, Commented Aug 23, 2016 at 21:03

John · Accepted Answer · 2016-08-23 21:45:36Z

1

See if this works for you:

if ($host !~* ^(.+\.)?domain\.com$ ) {
    return 444;
}

You need to escape the periods, otherwise they will be interpreted as "any character". You can also simplify the regex a bit by matching an optional subdomain prefix before "domain.com".

answered Aug 23, 2016 at 21:45

John

2,42516 silver badges21 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Roman · Accepted Answer · 2016-08-24 00:59:21Z

1

A cleaner solution would be to create a separate (default) server block for "other" server names:

server {
    server_name .domain.com; # shorter form for "domain.com *.domain.com"

    ... # your main config here
}

server {
    listen *:80 default_server;
    server_name "";

    return 444;
}

answered Aug 24, 2016 at 0:59

Roman

6,6772 gold badges28 silver badges43 bronze badges

Collectives™ on Stack Overflow

nginx domain regex to include wildcards

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related