How to Prevent DDOS and Block Bots in Nginx

Learn how to prevent DDOS attacks and protect against bad bots with the Nginx Ultimate Bad Bot Blocker.
Code snippets and more at tonyteaches.tech/nginx-block-...
Check out my vlog channel ‪@TonyFlorida‬
#nginx #ddos #bots

[@Rmly]

Thanks Tony!

[@TonyTeachesTech]

You're welcome!

[@saeed.rahimi.manesh]

great Tony

[@TonyTeachesTech]

Thanks

[@mrpoliticalguy5602]

it doesnt allow "if" in one of the files what i mean is a if statement.

[@sayedhusainalawi8534]

Thanks Tony....!!!
how to delete it .?(ubuntu)

[@LryuzakiLN]

Does it prevent Web Scrapping?

[@user-lm6fs8zd5z]

how to remove complaty nginx bot blocker

[@mecrayavcin]

Hi Tony i have a questions. I have LEMP server.
What is the difference between Nginx Ultimate Bad Bot Blocker and Modsecurity? Which one is better?
Thanks

[@TonyTeachesTech]

I'm not familiar with modsecurity

[@jacksoncremean1664]

modsecurity is a web application firewall it can do pretty much everything bad bot blocker can do but also protect you against things like SQL injections, XSS, CSRF and other common vulnerabilities that exist in web applications

[@mecrayavcin]

Does it protect for DDOSS? @@jacksoncremean1664

[@ProjectAryawarta]

Please don't get me wrong, but who will use this in production? Honestly I can't use it. Do you have the exact logic to do this. I am sure this is not so big that anybody should use a custom image. Because they will be looking for regular updates and official support also. And of course the relationship should be trusted!

[@irfanpratama9750]

hi tony so this prevents outside attacks to the domain ?

[@bloodbath-and-beyond]

Guaranteed that bad bot blocker isn’t working. Nginx will test without errors, but if you check the logs the .conf files install with 444 permissions by default.
You need to go into the bots.d file and chmod the files to 755 otherwise globalblacklist will throw a permission 13 error a few minutes AFTER Nginx starts. Hence why the test always passes.

[@TonyTeachesTech]

Thanks for the info

[@ibrahimgh765]

You are right i found its none for access in group & others i changed it to Read only is that right?

[@bloodbath-and-beyond]

@@ibrahimgh765 I've given up with the bad bot blocker. Every time the cron job runs to update the lists, it resets the permissions back to read-only for the root user group.
So there's two options: 1. don't ever update it which kind of defeats the point or, 2. constantly eagle-eye the error logs and manually change the permissions.

[@ibrahimgh765]

@@bloodbath-and-beyond Sorry for my late reply, thank you very much

[@mecrayavcin]

@@bloodbath-and-beyond what do you recomment for security ddoss etc? modesecurity is easy to install?

[@anshkumargarhewal8582]

Please make video on nginx proxy manager

[@TonyTeachesTech]

I can add this to my list of video ideas

[@itsanil950]

Curl 35 error showing

[@TonyTeachesTech]

I don't know

[@csangale]

How to grow follower on twitter.

[@TonyTeachesTech]

IDK

[@rationalism_communism]

theres an error.
When I Run journalctl -xeu nginx.service "To Find the issue."
it says "if" directive is not allowed here in /etc/nginx/bots.d/blockbots.conf:58
any solutions?

[@krystianczajkowski8044]

I have the same problem. Have you fixed it yet? If I do, I will write how to fix it in the next comment.

[@rationalism_communism]

@@krystianczajkowski8044 thank you
im the same guy as the mr political guy!
with the hammer and sickle.

[@krystianczajkowski8044]

@@rationalism_communism Hi, have you fixed it yet? If so, could you please tell me how? Regards.

[@krystianczajkowski8044]

@@rationalism_communism any solutions on how to resolve our problem?

[@shakuntyagi]

@@krystianczajkowski8044 Did you find the solution? I am trying it now and getting the same error as you mentioned. So if you are able to fix it please share for help. TIA