配置如下，可以和上面的配置结合上面的js和css，起来

location ~ ^.+.(gif|jpg|png|swf|flv|rar|zip|doc|pdf|gz|bz2|jpeg|bmp|xls)$

{

expires 7d;

valid_referers none blocked server_names .test.com ; //定义白名单的referers是什么if ($invalid_referer) { //如果不是白名单的返回403return 403; //也可使用denied all}access_log off;}location ~ .*.(js|css)${ expires 12h;access_log off;}

测试：

curl -e "" 192.168.211.152:80 test.com/lsx/qq.jpg -I //-e默认必须http开头HTTP/1.1 403 Forbidden

curl -e "" 192.168.211.152:80 test.com/lsx/qq.jpg -I

HTTP/1.1 200 OK