https://hehome.xyz/tag/%E5%9F%9F%E5%90%8D/Recent content in 域名 on 知行何家https://hehome.xyz/img/og-default.pnghttps://hehome.xyz/img/og-default.pngHugozh-cnThu, 29 Aug 2019 20:33:48 +0800https://hehome.xyz/archives/160/Sat, 17 Nov 2018 15:27:00 +0800https://hehome.xyz/archives/160/<p>突然发现，可以通过 IP 访问到网站，记得曾经在哪里看到这样并不好。所以去查了一下资料。</p> <p>原来能通过IP访问会有<code>域名恶意解析</code>的风险。<del>(具体有什么危害我后面再来补充吧)</del></p> <p>解决方法，可以在 <code>nginx</code> 中添加设置，让所有无法匹配的访问转跳到网站本来应该的域名上。</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-nginx" data-lang="nginx"><span class="line"><span class="cl"><span class="k">server</span> </span></span><span class="line"><span class="cl"><span class="p">{</span> </span></span><span class="line"><span class="cl"> <span class="kn">listen</span> <span class="mi">80</span> <span class="s">default_server</span><span class="p">;</span> </span></span><span class="line"><span class="cl"> <span class="kn">rewrite</span> <span class="s">^(.*)</span> <span class="s">https://hehome.xyz</span> <span class="s">permanent</span><span class="p">;</span> </span></span><span class="line"><span class="cl"><span class="p">}</span> </span></span><span class="line"><span class="cl"><span class="k">server</span> </span></span><span class="line"><span class="cl"><span class="p">{</span> </span></span><span class="line"><span class="cl"> <span class="kn">listen</span> <span class="mi">443</span> <span class="s">ssl</span> <span class="s">default_server</span><span class="p">;</span> </span></span><span class="line"><span class="cl"> <span class="kn">rewrite</span> <span class="s">^(.*)</span> <span class="s">https://hehome.xyz</span> <span class="s">permanent</span><span class="p">;</span> </span></span><span class="line"><span class="cl"><span class="p">}</span> </span></span></code></pre></div>