title: Redirect 403 errors in NGINX to null or silent
body: <p>I am  not finding help on this on the web, nor locate documentation for what I need done...  The problem was a solution that caused almost as much as a problem. Now I need a solution to a solution. Any answer how or link to documentation on controlling nginx error output would be great.</p>
  
  <p>The initial solution and circumstance:
  I have a PCI secured web server.  Attacks against it are routine. Everything was fine, low processing load, 30-40MB log files until OpenVAS was released on the web.</p>
  
  <p>Then my server's traffic spiked, the nginx usage went up 400% and the PHP backend usage went up 5000%. The logs jumped to 130+MB.  The increase was entirely the result of many new IPS probing the box with a the new tool kit. It hosed the back-end and I was forced to respond with something drastic....</p>
  
  <p>Now a cron routinely reviews logs; any IP requesting >X00 requests in an hour, requesting known URL hacks, or other logic; are added to a block list and nginx reloaded to brush off the attack.  Most things went back to normal after this.</p>
  
  <p>The new problem:</p>
  
  <p>I need help with, is how nginx handles the deny.</p>
  
  <p>When I used to go to my error log, I was finding 10-100 lines of errors or notices I need to review, correct, and push up to keep the box secure and tidy. </p>
  
  <p>However, Nginx considers every deny an error... My weekly error log is now 300,000 lines of: </p>
  
  <pre><code>2015/11/15 23:01:30 [error] 22040#0: *432212 access forbidden by rule, client: z.z.z.z, server: secure.mydomain.com, request: "GET /cadcd01153160add.aspx HTTP/1.1", host: "x.x.x.x"
  </code></pre>
  
  <p>With 100 lines of errors some where in there I need to address...</p>
  
  <p>yes, I can filter them out, but this function now duplicates the entries in the access-log to the error log so the original 35MB access + 100 error-line logs are now 270MB on a regular basis.  If this continues I may have to get a separate drive for the logs! (because the attacks are increasing)  So the single box can handle the load and thwart the attacks, but created an Achilles heel of log file size limitations.</p>
  
  <p>How does one suppress or redirect "403" as not an error and prevent it from flooding the log files so I can reduce the duplicate entries, log size (error log) and go about my routines easier?</p>