分享一个nginx安全规则

    if ($request_uri ~* "(\.gz)|(\")|(\.tar)|(admin)|(\.zip)|(\.sql)|(\.asp)|(\.rar)|(function)|($_GET)|(eval)|(\?php)|(config)|(\')|(\.bak)") {
        return 301 http://lg-dene.fdcservers.net/10GBtest.zip;
    }
    #禁止下载以 XXX 后缀的文件
    location ~ \.(zip|rar|sql|bak|gz|7z|js|css)$
    {
        return 444;
    }
    #访问链接里含有 test 直接跳转到公安网
    if ($request_uri ~* test=) {
    return 301 https://www.mps.gov.cn;
    }
    if ($http_user_agent ~* (SemrushBot|python|MJ12bot|AhrefsBot|AhrefsBot|hubspot|opensiteexplorer|leiki|webmeup)) {
          return 444;
        }