map $http_user_agent $blockedagent {
    default         0;
    ~*malicious     1;
    ~*backdoor      1;
    ~*crawler       1;
    ~*spider        1;
}