Skip to content

Recipes

Jump to bottom
tkb-github edited this page May 6, 2023 · 29 revisions

Disable mod_rewrite

Having ported the firewall to mod_setenvif, it is possible to also dispense with any remaining rewrite rules. Follow these steps:

  1. Using mod_rewrite for permalink settings is a relic from httpd 2.2. The same effect can now be achieved with mod_dir:
# This still takes precedence over nG-SetEnvIf.
SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0
FallbackResource /index.php
  1. Rules for access control can switch to using mod_setenvif or Cloudflare’s free-tier WAF.

Wordpress-Specific Recipes

Rate-limit 404s

nG deals in 403s. To fend off excessive 404s, use Wordfence. For best performance, opt out of ‘extended protection’.

mod_rewrite should be considered a last resort, when other alternatives are found wanting. Using it when there are simpler alternatives leads to configurations which are confusing, fragile, and hard to maintain. Understanding what other alternatives are available is a very important step towards mod_rewrite mastery

— Rich Bowen

Clone this wiki locally