server { 
listen    12.123.123.123:80 default; 
server_name    youtsite.com *.yoursite.com;
access_log      /var/www/log/access.log combined;
    error_log    /var/www/log/error.log error;
root     /var/www/htdocs/;

    location / {
index    index.php index.html index.htm;
try_files $uri $uri/ @rewrites;
}

location ~ \.php$ {
    try_files $uri =404;
    fastcgi_split_path_info ^(.+\.php)(/.+)$;
    fastcgi_index index.php;
    fastcgi_pass unix:/var/run/php5-fpm.socket;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    include /etc/nginx/fastcgi_params;
}

error_page 404 /index.php;
autoindex off;

## Only allow these request methods ##
if ($request_method !~ ^(GET|HEAD|POST)$ ) {
    return 444;
    }

## Block download agents ##
if ($http_user_agent ~* (libwww-perl|wget|python|nikto|curl|scan|java|winhttp|HTTrack|clshttp|archiver|loader|email|harvest|extract|grab|miner) ) {
return 403;
}

## Deny certain Referers ##
    if ( $http_referer ~* (babes|forsale|girl|jewelry|love|nudit|organic|poker|porn|sex|teen) ) {
    return 403;
}

## Directory Protection ##
location ~ /\. { 
deny  all; 
}

## sample ##
    #location /zbblock/ {
#deny all;
#return 404;
#}

## RESSOURCES ##
location ~ \.(?:ico|png|jpe?g|css|js)$ {
expires 31d;        
add_header Pragma "public";
add_header Cache-Control "public, must-revalidate, proxy-revalidate";
}

location ~ \.(php~|.php.bak)$ {
    deny all;
    return 404;
}

## REWRITES ##
location ~ ^/(\d+)/$ {
return 301 /?p=$1;
}

location @rewrites {
rewrite ^ /index.php last;
}
    }