Now if client requests more ranges than "max_ranges" permits,
nginx disables ranges and returns just the source response.

src/http/modules/ngx_http_range_filter_module.c

diff --git a/src/http/modules/ngx_http_range_filter_module.c b/src/http/modules/ngx_http_range_filter_module.c
index 2d7c1c2..02d2bf9 100644
--- a/src/http/modules/ngx_http_range_filter_module.c
+++ b/src/http/modules/ngx_http_range_filter_module.c
@@ -323,8 +323,8 @@
 
             size += end - start;
 
-            if (--ranges == 0) {
-                break;
+            if (ranges-- == 0) {
+                return NGX_DECLINED;
             }
         }