Suppress nginx access denied error log

Question

I have some rules setup in nginx to deny access by IPs. This works great, but for each request from a denied IP, an error that starts with the following gets logged:

[error] 7325#0: *5761 access forbidden by rule, client...

Is there a way to suppress these "errors" from being logged?

Aleksey Deryagin · Accepted Answer · 2014-09-10 20:19:23Z

4

You can set error_log to less strict level, but you can lost important alerts in this case.

Core functionality - error_log

error_log filename crit;

answered Sep 10, 2014 at 20:19

Aleksey Deryagin

2,6852 gold badges21 silver badges18 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Andrew Frankel Over a year ago

Thanks. We do care about other errors, and the access denied logs add a lot of unwanted noise to the mix. Is there a way to only suppress the access denied errors, or send them to another log?

pva · Accepted Answer · 2021-03-11 17:25:44Z

3

There is better solution, suggested by upstream - to use geo block with if to reject requests like:

geo $blocked {
    default 0;
    1.1.1.1/32 1;
}
...
server {

  if ($blocked) {
    return 444;
  }
}

answered Mar 11, 2021 at 17:25

pva

2,0741 gold badge12 silver badges8 bronze badges

3 Comments

DarkNeuron Over a year ago

People aren't glad of if in an NGINX context.

pva Over a year ago

I know, "if is evil". But still, it is very useful. This is exactly the case where it is good solution.

DarkNeuron Over a year ago

I think most people vaguely recall that if doesn't behave like an if in most other languages, and then steer clear of it. But good if it works. 👍🏻

Collectives™ on Stack Overflow

Suppress nginx access denied error log

2 Answers 2

1 Comment

3 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

3 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related