map $http_user_agent $bad_user_agent { default no; %BLOCK_USER_AGENT% }