On my development web server machine I am blocking all access that doesn’t use a domain name. This is very easy. My default nginx server simply returns error 499 and my fail2ban filter and jail blocks all error 499 return codes forever.
Here is my nginx default.conf:
listen 80 default;
I would like to do the same on production, except for ‘good’ search engines like google, bing, etc. Any suggestions?