nginx 禁止访问配置，指定URL地址指定IP允许访问

nginx 禁止访问配置，但是满足一下任意一个条件时允许访问
1.允许访问某个url地址
2.指定IP 一个或 多个
风.foxiswho

server {
    listen       80;
    server_name  www.lanmps.com;
    root /Volumes/work/lanmps.com;
    index index.html index.htm index.php;
#///
#主要配置如下
    set $flag f;
    if ($request_uri ~* "^/pay/notify.html$") {
          set $flag "${flag}1";
    }
    if ($remote_addr = "127.0.0.1") {
        set $flag "${flag}2";
    }
    if ($remote_addr = "192.168.1.40") {
        set $flag "${flag}2";
    }
    if ($flag = "f1" ){
        set $flag ok;
    }
    if ($flag = "f2" ){
        set $flag ok;
    }
    if ($flag = "f12" ){
        set $flag ok;
    }
    if ($flag != "ok" ){
        return 403;
    }
#///
    include /Volumes/work/www.lanmps.com/lanmps-*.conf;
    #location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)?$ {
    #       #expires      30d;
    #       return  403;
    #}
    #location ~ .*\.(js|css)?$ {
    #       expires      12h;
    #}
    location ~ ^.+\.php {
        #fastcgi_pass  unix:/tmp/php-cgi.sock;
        #fastcgi_pass   127.0.0.1:9950;
        fastcgi_pass   bakend;
        fastcgi_index  index.php;
        fastcgi_split_path_info ^((?U).+\.php)(/?.+)$;
        include        fastcgi.conf;
    }
    access_log  /Volumes/work/www.lanmps.com.log acc;
}

首发 http://www.foxwho.com/article/166
同步 foxwho(神秘狐)的领地 http://www.foxwho.com