{"id":16340,"date":"2026-08-12T23:56:19","date_gmt":"2026-08-12T20:56:19","guid":{"rendered":"https:\/\/www.ihs.com.tr\/blog\/?p=16340"},"modified":"2026-08-12T23:56:19","modified_gmt":"2026-08-12T20:56:19","slug":"yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/","title":{"rendered":"Yeni Bir VPS Ald\u0131ktan Sonra \u0130lk 15 Dakikada Yap\u0131lmas\u0131 Gerekenler"},"content":{"rendered":"<p>Yeni bir Sanal \u00d6zel Sunucu (VPS) sahibi olmak, dijital d\u00fcnyada kendi alan\u0131n\u0131z\u0131 yaratman\u0131n heyecan verici bir ilk ad\u0131m\u0131d\u0131r. Ancak bu bo\u015f tuval, ayn\u0131 zamanda do\u011fru g\u00fcvenlik ve yap\u0131land\u0131rma ad\u0131mlar\u0131 at\u0131lmad\u0131\u011f\u0131nda potansiyel riskler de bar\u0131nd\u0131r\u0131r. Sunucunuzu internetin zorlu ko\u015fullar\u0131na haz\u0131rlamak, projelerinizin sa\u011fl\u0131\u011f\u0131 ve g\u00fcvenli\u011fi i\u00e7in hayati \u00f6nem ta\u015f\u0131r. T\u0131pk\u0131 yeni bir ev ald\u0131\u011f\u0131n\u0131zda ilk olarak kilitleri de\u011fi\u015ftirmek ve pencereleri kontrol etmek gibi, yeni bir sunucuda da ilk dakikalarda at\u0131lmas\u0131 gereken temel g\u00fcvenlik ad\u0131mlar\u0131 bulunur. Bu ad\u0131mlar, sunucunuzu olas\u0131 tehditlere kar\u015f\u0131 bir kale gibi korunakl\u0131 hale getirmenin temelini olu\u015fturur ve gelecekte ya\u015fanabilecek bir\u00e7ok ba\u015f a\u011fr\u0131s\u0131n\u0131 en ba\u015f\u0131ndan engeller. Bu rehberde, yeni VPS&#8217;inizi ald\u0131ktan sonraki ilk 15 dakika i\u00e7inde atman\u0131z gereken kritik ad\u0131mlar\u0131 detayl\u0131 bir \u015fekilde ele alaca\u011f\u0131z.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_77 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7erik Tablosu<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6a7cf87c10325\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\" id=\"ez-toc-cssicon-toggle-item-6a7cf87c10325\" aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Ilk-Baglanti-ve-Temel-Guvenlik-Adimlari\" >\u0130lk Ba\u011flant\u0131 ve Temel G\u00fcvenlik Ad\u0131mlar\u0131<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#SSH-Nedir-ve-Sunucuya-Nasil-Baglanilir\" >SSH Nedir ve Sunucuya Nas\u0131l Ba\u011flan\u0131l\u0131r?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Varsayilan-Root-Parolasini-Degistirme\" >Varsay\u0131lan Root Parolas\u0131n\u0131 De\u011fi\u015ftirme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Sunucunun-Temel-Bilgilerini-Gozden-Gecirme\" >Sunucunun Temel Bilgilerini G\u00f6zden Ge\u00e7irme<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Kullanici-Yonetimi-ve-Yetkilendirme\" >Kullan\u0131c\u0131 Y\u00f6netimi ve Yetkilendirme<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Neden-Root-Hesabini-Dogrudan-Kullanmamaliyiz\" >Neden Root Hesab\u0131n\u0131 Do\u011frudan Kullanmamal\u0131y\u0131z?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Sudo-Yetkilerine-Sahip-Yeni-Bir-Kullanici-Olusturma\" >Sudo Yetkilerine Sahip Yeni Bir Kullan\u0131c\u0131 Olu\u015fturma<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Yeni-Kullanici-Hesabina-Gecis-Yapma-ve-Dogrulama\" >Yeni Kullan\u0131c\u0131 Hesab\u0131na Ge\u00e7i\u015f Yapma ve Do\u011frulama<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#SSH-Servisini-Guclendirme-Hardening\" >SSH Servisini G\u00fc\u00e7lendirme (Hardening)<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Varsayilan-SSH-Portunu-Degistirme\" >Varsay\u0131lan SSH Portunu De\u011fi\u015ftirme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Root-Kullanicisinin-SSH-ile-Girisini-Yasaklama\" >Root Kullan\u0131c\u0131s\u0131n\u0131n SSH ile Giri\u015fini Yasaklama<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Parola-ile-Giris-Yerine-SSH-Anahtari-Kullanimini-Yapilandirma\" >Parola ile Giri\u015f Yerine SSH Anahtar\u0131 Kullan\u0131m\u0131n\u0131 Yap\u0131land\u0131rma<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Temel-Guvenlik-Duvari-Firewall-Yapilandirmasi\" >Temel G\u00fcvenlik Duvar\u0131 (Firewall) Yap\u0131land\u0131rmas\u0131<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Guvenlik-Duvari-Firewall-Neden-Gereklidir\" >G\u00fcvenlik Duvar\u0131 (Firewall) Neden Gereklidir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#UFW-Uncomplicated-Firewall-Kurulumu-ve-Aktiflestirilmesi\" >UFW (Uncomplicated Firewall) Kurulumu ve Aktifle\u015ftirilmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Temel-Servisler-Icin-SSH-HTTP-HTTPS-Erisim-Kurallarini-Tanimlama\" >Temel Servisler \u0130\u00e7in (SSH, HTTP, HTTPS) Eri\u015fim Kurallar\u0131n\u0131 Tan\u0131mlama<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Sistem-Guncellemeleri-ve-Temel-Paketler\" >Sistem G\u00fcncellemeleri ve Temel Paketler<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Paket-Depolarini-ve-Mevcut-Paketleri-Guncelleme\" >Paket Depolar\u0131n\u0131 ve Mevcut Paketleri G\u00fcncelleme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Sik-Kullanilan-Yardimci-Araclarin-Kurulumu-htop-ncdu-vb\" >S\u0131k Kullan\u0131lan Yard\u0131mc\u0131 Ara\u00e7lar\u0131n Kurulumu (htop, ncdu vb.)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Brute-Force-Saldirilarina-Karsi-Fail2Ban-Kurulumu-ve-Yapilandirmasi\" >Brute-Force Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Fail2Ban Kurulumu ve Yap\u0131land\u0131rmas\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.ihs.com.tr\/blog\/yeni-bir-vps-aldiktan-sonra-ilk-15-dakikada-yapilmasi-gerekenler\/#Guvenli-ve-Performansli-VPS-Hizmeti-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\" >G\u00fcvenli ve Performansl\u0131 VPS Hizmeti \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Ilk-Baglanti-ve-Temel-Guvenlik-Adimlari\"><\/span>\u0130lk Ba\u011flant\u0131 ve Temel G\u00fcvenlik Ad\u0131mlar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Sunucunuzla tan\u0131\u015faca\u011f\u0131n\u0131z bu ilk a\u015fama, en kritik g\u00fcvenlik \u00f6nlemlerini i\u00e7erir. Sa\u011flay\u0131c\u0131n\u0131z taraf\u0131ndan size iletilen bilgilerle sunucuya ilk eri\u015fimi sa\u011flamak ve varsay\u0131lan ayarlar\u0131 derhal de\u011fi\u015ftirmek, d\u0131\u015f d\u00fcnyaya kar\u015f\u0131 ilk savunma hatt\u0131n\u0131z\u0131 olu\u015fturacakt\u0131r. Bu ad\u0131mlar, sunucunuzun kontrol\u00fcn\u00fc tamamen size ge\u00e7irir ve yetkisiz eri\u015fim riskini en aza indirir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"SSH-Nedir-ve-Sunucuya-Nasil-Baglanilir\"><\/span>SSH Nedir ve Sunucuya Nas\u0131l Ba\u011flan\u0131l\u0131r?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><a href=\"https:\/\/www.ihs.com.tr\/blog\/ssh-nedir\/\" target=\"_blank\">SSH (Secure Shell)<\/a>, sunucunuza internet \u00fczerinden g\u00fcvenli bir \u015fekilde ba\u011flanman\u0131z\u0131 ve komut sat\u0131r\u0131 arac\u0131l\u0131\u011f\u0131yla onu y\u00f6netmenizi sa\u011flayan bir protokold\u00fcr. Veri ak\u0131\u015f\u0131 \u015fifrelendi\u011fi i\u00e7in ba\u011flant\u0131n\u0131z d\u0131\u015far\u0131dan dinlenemez. Yeni bir <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vps-server.html\" target=\"_blank\">vps<\/a> sunucusuna genellikle SSH \u00fczerinden &#8220;root&#8221; kullan\u0131c\u0131s\u0131 ile ba\u011flan\u0131l\u0131r. Ba\u011flant\u0131 i\u00e7in macOS ve Linux sistemlerde Terminal&#8217;i, Windows&#8217;ta ise PuTTY gibi bir istemciyi kullanabilirsiniz. Temel ba\u011flant\u0131 komutu \u015fu \u015fekildedir: <code>ssh root@sunucu_ip_adresi<\/code>. \u0130lk ba\u011flant\u0131da, sunucunun kimli\u011fini do\u011frulaman\u0131z istenecektir; &#8220;yes&#8221; yazarak devam edebilir ve ard\u0131ndan size verilen ge\u00e7ici parolay\u0131 girebilirsiniz.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Varsayilan-Root-Parolasini-Degistirme\"><\/span>Varsay\u0131lan Root Parolas\u0131n\u0131 De\u011fi\u015ftirme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sunucuya ilk kez giri\u015f yapt\u0131ktan sonra yapman\u0131z gereken en acil i\u015flem, root kullan\u0131c\u0131s\u0131n\u0131n varsay\u0131lan parolas\u0131n\u0131 de\u011fi\u015ftirmektir. Otomatik olarak olu\u015fturulan bu parolalar genellikle tahmin edilebilir veya basit olabilir. Komut sat\u0131r\u0131na <code>passwd<\/code> yazarak yeni parola belirleme s\u00fcrecini ba\u015flatabilirsiniz. G\u00fc\u00e7l\u00fc bir parola olu\u015fturdu\u011funuzdan emin olun; b\u00fcy\u00fck\/k\u00fc\u00e7\u00fck harf, rakam ve \u00f6zel karakterler i\u00e7eren, en az 12-16 karakter uzunlu\u011funda bir parola se\u00e7mek g\u00fcvenli\u011finizi \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131racakt\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sunucunun-Temel-Bilgilerini-Gozden-Gecirme\"><\/span>Sunucunun Temel Bilgilerini G\u00f6zden Ge\u00e7irme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Parolan\u0131z\u0131 de\u011fi\u015ftirdikten sonra, sunucunuzun temel yap\u0131land\u0131rmas\u0131n\u0131 ve kaynak durumunu kontrol etmek iyi bir fikirdir. Bu, her \u015feyin beklendi\u011fi gibi \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olman\u0131z\u0131 sa\u011flar. \u0130\u015fletim sistemi s\u00fcr\u00fcm\u00fcn\u00fc \u00f6\u011frenmek i\u00e7in <code>lsb_release -a<\/code> veya <code>cat \/etc\/os-release<\/code>, kernel s\u00fcr\u00fcm\u00fcn\u00fc g\u00f6rmek i\u00e7in <code>uname -a<\/code>, disk kullan\u0131m\u0131n\u0131 kontrol etmek i\u00e7in <code>df -h<\/code> ve bellek (RAM) durumunu g\u00f6rmek i\u00e7in <code>free -h<\/code> gibi temel komutlar\u0131 kullanabilirsiniz. Bu komutlar, sunucunuzun &#8220;kimlik kart\u0131&#8221; gibidir ve gelecekteki yap\u0131land\u0131rmalar i\u00e7in size yol g\u00f6sterir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Kullanici-Yonetimi-ve-Yetkilendirme\"><\/span>Kullan\u0131c\u0131 Y\u00f6netimi ve Yetkilendirme<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Sunucunuzu do\u011frudan &#8220;root&#8221; hesab\u0131 ile y\u00f6netmek, hem g\u00fcvenlik hem de operasyonel a\u00e7\u0131dan ciddi riskler ta\u015f\u0131r. Bu b\u00f6l\u00fcmde, neden root hesab\u0131ndan ka\u00e7\u0131nman\u0131z gerekti\u011fini ve bunun yerine g\u00fcnl\u00fck i\u015fler i\u00e7in daha g\u00fcvenli bir alternatif olan &#8220;sudo&#8221; yetkilerine sahip standart bir kullan\u0131c\u0131y\u0131 nas\u0131l olu\u015fturaca\u011f\u0131n\u0131z\u0131 ele alaca\u011f\u0131z. Bu uygulama, Linux y\u00f6netiminin en temel g\u00fcvenlik prensiplerinden biridir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Neden-Root-Hesabini-Dogrudan-Kullanmamaliyiz\"><\/span>Neden Root Hesab\u0131n\u0131 Do\u011frudan Kullanmamal\u0131y\u0131z?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Root kullan\u0131c\u0131s\u0131, Linux sistemlerindeki en yetkili hesapt\u0131r ve her komutu sorgusuz sualsiz \u00e7al\u0131\u015ft\u0131rma g\u00fcc\u00fcne sahiptir. Bu durum, yanl\u0131\u015fl\u0131kla yaz\u0131lan bir komutun (\u00f6rne\u011fin, <code>rm -rf \/<\/code>) t\u00fcm sistemi geri d\u00f6n\u00fclmez bir \u015fekilde silmesine neden olabilir. Ayr\u0131ca, root hesab\u0131n\u0131n parolas\u0131n\u0131n ele ge\u00e7irilmesi durumunda, sald\u0131rgan sunucu \u00fczerinde mutlak kontrol sahibi olur. Bu nedenlerle, g\u00fcnl\u00fck i\u015flemler i\u00e7in root hesab\u0131n\u0131 kullanmak yerine, yetkileri k\u0131s\u0131tl\u0131 bir kullan\u0131c\u0131 ile \u00e7al\u0131\u015fmak ve sadece gerekti\u011finde y\u00f6netici yetkileri kazanmak \u00e7ok daha g\u00fcvenli bir yakla\u015f\u0131md\u0131r.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>\u00d6zellik<\/th>\n<th>Root Kullan\u0131c\u0131s\u0131<\/th>\n<th>Sudo Yetkili Kullan\u0131c\u0131<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Yetki Seviyesi<\/strong><\/td>\n<td>Mutlak ve s\u0131n\u0131rs\u0131z<\/td>\n<td>S\u0131n\u0131rl\u0131, sadece `sudo` komutu ile ge\u00e7ici olarak y\u00fckseltilir<\/td>\n<\/tr>\n<tr>\n<td><strong>Risk Fakt\u00f6r\u00fc<\/strong><\/td>\n<td>\u00c7ok Y\u00fcksek (Tek bir hata sistemi yok edebilir)<\/td>\n<td>D\u00fc\u015f\u00fck (Komutlar `sudo` ile teyit gerektirir)<\/td>\n<\/tr>\n<tr>\n<td><strong>G\u00fcvenlik<\/strong><\/td>\n<td>Parola \u00e7al\u0131n\u0131rsa tam kontrol kaybedilir<\/td>\n<td>Kullan\u0131c\u0131 hesab\u0131 ele ge\u00e7irilse bile ek `sudo` parolas\u0131 gerekir<\/td>\n<\/tr>\n<tr>\n<td><strong>\u0130zlenebilirlik<\/strong><\/td>\n<td>T\u00fcm i\u015flemler &#8220;root&#8221; olarak g\u00f6r\u00fcn\u00fcr, kimin yapt\u0131\u011f\u0131n\u0131 ay\u0131rt etmek zordur<\/td>\n<td>Hangi kullan\u0131c\u0131n\u0131n hangi `sudo` komutunu \u00e7al\u0131\u015ft\u0131rd\u0131\u011f\u0131 kay\u0131t alt\u0131na al\u0131n\u0131r<\/td>\n<\/tr>\n<tr>\n<td><strong>\u00d6nerilen Kullan\u0131m<\/strong><\/td>\n<td>Sadece ilk kurulum ve acil durumlar i\u00e7in<\/td>\n<td>T\u00fcm g\u00fcnl\u00fck y\u00f6netim ve operasyonel g\u00f6revler i\u00e7in<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h3><span class=\"ez-toc-section\" id=\"Sudo-Yetkilerine-Sahip-Yeni-Bir-Kullanici-Olusturma\"><\/span>Sudo Yetkilerine Sahip Yeni Bir Kullan\u0131c\u0131 Olu\u015fturma<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>G\u00fcnl\u00fck i\u015flerinizi y\u00fcr\u00fctecek yeni bir kullan\u0131c\u0131 olu\u015fturmak i\u00e7in root hesab\u0131n\u0131zdayken <code>adduser kullaniciadi<\/code> komutunu \u00e7al\u0131\u015ft\u0131r\u0131n. Sistem size yeni kullan\u0131c\u0131 i\u00e7in bir parola belirlemenizi ve baz\u0131 temel bilgileri girmenizi isteyecektir. Ard\u0131ndan, bu kullan\u0131c\u0131ya y\u00f6netici komutlar\u0131n\u0131 \u00e7al\u0131\u015ft\u0131rma yetkisi (sudo) vermek i\u00e7in onu &#8220;sudo&#8221; (Debian\/Ubuntu) veya &#8220;wheel&#8221; (CentOS) grubuna eklemeniz gerekir. Ubuntu\/Debian sistemler i\u00e7in komut \u015f\u00f6yledir: <code>usermod -aG sudo kullaniciadi<\/code>. Bu i\u015flemle, yeni kullan\u0131c\u0131n\u0131z kendi parolas\u0131yla <code>sudo<\/code> komutunu kullanarak y\u00f6netici ayr\u0131cal\u0131klar\u0131na sahip olabilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yeni-Kullanici-Hesabina-Gecis-Yapma-ve-Dogrulama\"><\/span>Yeni Kullan\u0131c\u0131 Hesab\u0131na Ge\u00e7i\u015f Yapma ve Do\u011frulama<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yeni kullan\u0131c\u0131n\u0131z\u0131 olu\u015fturup sudo yetkilerini verdikten sonra, root oturumundan \u00e7\u0131k\u0131\u015f yap\u0131p (<code>exit<\/code> komutu ile) yeni kullan\u0131c\u0131 hesab\u0131n\u0131zla SSH \u00fczerinden tekrar ba\u011flanman\u0131z en do\u011frusudur. Alternatif olarak, mevcut root oturumunuzdan do\u011frudan yeni kullan\u0131c\u0131ya ge\u00e7mek i\u00e7in <code>su - kullaniciadi<\/code> komutunu kullanabilirsiniz. Yeni kullan\u0131c\u0131 hesab\u0131na ge\u00e7tikten sonra, sudo yetkilerinin do\u011fru \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 do\u011frulamak \u00f6nemlidir. Bunu test etmek i\u00e7in y\u00f6netici izni gerektiren basit bir komut \u00e7al\u0131\u015ft\u0131rabilirsiniz, \u00f6rne\u011fin: <code>sudo apt update<\/code>. Sistem sizden `kullaniciadi`&#8217;n\u0131n parolas\u0131n\u0131 isteyecektir. E\u011fer komut ba\u015far\u0131yla \u00e7al\u0131\u015f\u0131rsa, yetkilendirme i\u015fleminiz tamamlanm\u0131\u015f demektir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"SSH-Servisini-Guclendirme-Hardening\"><\/span>SSH Servisini G\u00fc\u00e7lendirme (Hardening)<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Sunucunuza a\u00e7\u0131lan ana kap\u0131 olan SSH servisi, ayn\u0131 zamanda sald\u0131rganlar\u0131n en \u00e7ok hedef ald\u0131\u011f\u0131 noktalardan biridir. Varsay\u0131lan ayarlarla b\u0131rak\u0131lan bir SSH servisi, otomatik botlar ve k\u00f6t\u00fc niyetli ki\u015filer i\u00e7in davetiye \u00e7\u0131kar\u0131r. Bu b\u00f6l\u00fcmde, SSH servisinizi daha g\u00fcvenli hale getirmek i\u00e7in yap\u0131lmas\u0131 gereken \u00fc\u00e7 temel sa\u011flamla\u015ft\u0131rma (hardening) ad\u0131m\u0131n\u0131 inceleyece\u011fiz: port de\u011fi\u015ftirme, root giri\u015fini yasaklama ve parola yerine daha g\u00fcvenli olan SSH anahtar kullan\u0131m\u0131n\u0131 zorunlu k\u0131lma.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Varsayilan-SSH-Portunu-Degistirme\"><\/span>Varsay\u0131lan SSH Portunu De\u011fi\u015ftirme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>SSH servisi varsay\u0131lan olarak 22 numaral\u0131 portu kullan\u0131r. Bu bilgi herkes taraf\u0131ndan bilindi\u011fi i\u00e7in, otomatik sald\u0131r\u0131 botlar\u0131 s\u00fcrekli olarak 22. portu tarayarak zay\u0131f parolalara sahip sunucular\u0131 bulmaya \u00e7al\u0131\u015f\u0131r. Bu otomatik taramalardan kurtulman\u0131n en basit yolu, SSH portunu standart d\u0131\u015f\u0131 bir numara ile de\u011fi\u015ftirmektir. Bunun i\u00e7in SSH yap\u0131land\u0131rma dosyas\u0131n\u0131 (genellikle <code>\/etc\/ssh\/sshd_config<\/code>) bir metin edit\u00f6r\u00fc ile a\u00e7\u0131n, <code>#Port 22<\/code> sat\u0131r\u0131n\u0131 bulun, ba\u015f\u0131ndaki diyez i\u015faretini kald\u0131r\u0131n ve 22 yerine 1024-65535 aras\u0131nda, ba\u015fka bir servis taraf\u0131ndan kullan\u0131lmayan bir port numaras\u0131 yaz\u0131n. De\u011fi\u015fikli\u011fi kaydettikten sonra SSH servisini yeniden ba\u015flatarak (<code>sudo systemctl restart sshd<\/code>) ayarlar\u0131n aktif olmas\u0131n\u0131 sa\u011flay\u0131n. Unutmay\u0131n, bu de\u011fi\u015fiklikten sonra sunucunuza ba\u011flan\u0131rken yeni port numaras\u0131n\u0131 belirtmeniz gerekecektir: <code>ssh kullaniciadi@sunucu_ip_adresi -p YENI_PORT<\/code>.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Root-Kullanicisinin-SSH-ile-Girisini-Yasaklama\"><\/span>Root Kullan\u0131c\u0131s\u0131n\u0131n SSH ile Giri\u015fini Yasaklama<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sunucunuzdaki en g\u00fc\u00e7l\u00fc kullan\u0131c\u0131 olan root hesab\u0131na do\u011frudan SSH \u00fczerinden eri\u015filebilmesi, b\u00fcy\u00fck bir g\u00fcvenlik riskidir. E\u011fer bir sald\u0131rgan root parolas\u0131n\u0131 ele ge\u00e7irirse, sunucunun tamam\u0131n\u0131 kontrol alt\u0131na al\u0131r. Bu riski ortadan kald\u0131rmak i\u00e7in, daha \u00f6nce olu\u015fturdu\u011funuz sudo yetkili kullan\u0131c\u0131y\u0131 kullanarak, root kullan\u0131c\u0131s\u0131n\u0131n SSH ile giri\u015fini tamamen yasaklamal\u0131s\u0131n\u0131z. Yine <code>\/etc\/ssh\/sshd_config<\/code> dosyas\u0131n\u0131 a\u00e7\u0131n ve <code>PermitRootLogin<\/code> sat\u0131r\u0131n\u0131 bulun. Bu sat\u0131r\u0131n de\u011ferini <code>no<\/code> olarak de\u011fi\u015ftirin (<code>PermitRootLogin no<\/code>). Dosyay\u0131 kaydedip SSH servisini yeniden ba\u015flatt\u0131\u011f\u0131n\u0131zda, art\u0131k root kullan\u0131c\u0131s\u0131 ile do\u011frudan SSH ba\u011flant\u0131s\u0131 kurulamayacakt\u0131r. Bu, sald\u0131rganlar\u0131n i\u015fini \u00f6nemli \u00f6l\u00e7\u00fcde zorla\u015ft\u0131r\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Parola-ile-Giris-Yerine-SSH-Anahtari-Kullanimini-Yapilandirma\"><\/span>Parola ile Giri\u015f Yerine SSH Anahtar\u0131 Kullan\u0131m\u0131n\u0131 Yap\u0131land\u0131rma<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Parolalar, kaba kuvvet (brute-force) sald\u0131r\u0131lar\u0131 ile k\u0131r\u0131labilirler. \u00c7ok daha g\u00fcvenli bir y\u00f6ntem olan SSH anahtar tabanl\u0131 kimlik do\u011frulama, parola kullan\u0131m\u0131n\u0131 tamamen devre d\u0131\u015f\u0131 b\u0131rak\u0131r. Bu sistemde, kendi bilgisayar\u0131n\u0131zda birbiriyle e\u015fle\u015fen bir \u00f6zel (private) ve bir genel (public) anahtar \u00e7ifti olu\u015fturursunuz. Genel anahtar\u0131 sunucunuza kopyalarken, \u00f6zel anahtar sadece sizin bilgisayar\u0131n\u0131zda kal\u0131r. Ba\u011flant\u0131 s\u0131ras\u0131nda, sunucu sizin \u00f6zel anahtar\u0131n\u0131za sahip oldu\u011funuzu kriptografik olarak do\u011frular ve giri\u015fe izin verir. Bu y\u00f6ntem, parola tahmin etme sald\u0131r\u0131lar\u0131n\u0131 imkans\u0131z hale getirir. SSH anahtar\u0131 olu\u015fturup sunucuya kopyalad\u0131ktan sonra, yine <code>sshd_config<\/code> dosyas\u0131ndan <code>PasswordAuthentication no<\/code> ayar\u0131n\u0131 yaparak parola ile giri\u015fi tamamen kapatmal\u0131s\u0131n\u0131z. Bu ad\u0131m, bir <a href=\"https:\/\/www.ihs.com.tr\/ssl\/\" target=\"_blank\">ssl sertifikas\u0131<\/a> kullan\u0131m\u0131n\u0131n web sitenizi korumas\u0131 gibi, sunucu eri\u015fiminizi en \u00fcst d\u00fczeyde g\u00fcvence alt\u0131na al\u0131r.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Temel-Guvenlik-Duvari-Firewall-Yapilandirmasi\"><\/span>Temel G\u00fcvenlik Duvar\u0131 (Firewall) Yap\u0131land\u0131rmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Sunucunuzu internete a\u00e7t\u0131\u011f\u0131n\u0131zda, d\u00fcnyan\u0131n her yerinden gelen iyi ve k\u00f6t\u00fc niyetli trafik isteklerine maruz kal\u0131r. Bir g\u00fcvenlik duvar\u0131 (firewall), bu trafi\u011fi filtreleyerek sunucunuza kimin ve hangi hizmet \u00fczerinden eri\u015febilece\u011fini kontrol eden bir dijital kap\u0131 bek\u00e7isi g\u00f6revi g\u00f6r\u00fcr. Bu b\u00f6l\u00fcmde, g\u00fcvenlik duvar\u0131n\u0131n neden bu kadar \u00f6nemli oldu\u011funu ve Linux i\u00e7in pop\u00fcler bir ara\u00e7 olan UFW (Uncomplicated Firewall) ile temel kurallar\u0131 nas\u0131l kolayca tan\u0131mlayabilece\u011finizi anlataca\u011f\u0131z.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenlik-Duvari-Firewall-Neden-Gereklidir\"><\/span>G\u00fcvenlik Duvar\u0131 (Firewall) Neden Gereklidir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir <a href=\"https:\/\/www.ihs.com.tr\/blog\/firewall-nedir-ne-ise-yarar\/\" target=\"_blank\">g\u00fcvenlik duvar\u0131<\/a>, sunucunuzun a\u011f portlar\u0131n\u0131 yetkisiz eri\u015fime kar\u015f\u0131 korur. Sunucunuzda \u00e7al\u0131\u015fan her servis (web sunucusu, veritaban\u0131, e-posta sunucusu vb.) belirli bir portu dinler. G\u00fcvenlik duvar\u0131 olmadan, t\u00fcm bu portlar internete a\u00e7\u0131kt\u0131r ve sald\u0131rganlar taraf\u0131ndan taranarak bilinen zafiyetler i\u00e7in istismar edilebilir. G\u00fcvenlik duvar\u0131, &#8220;varsay\u0131lan olarak her \u015feyi engelle, sadece izin verdiklerime ge\u00e7it ver&#8221; prensibiyle \u00e7al\u0131\u015f\u0131r. Bu sayede, sadece belirledi\u011finiz servislere (\u00f6rne\u011fin web trafi\u011fi i\u00e7in 80 ve 443. portlar) eri\u015fim izni vererek sald\u0131r\u0131 y\u00fczeyini b\u00fcy\u00fck \u00f6l\u00e7\u00fcde daralt\u0131rs\u0131n\u0131z.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"UFW-Uncomplicated-Firewall-Kurulumu-ve-Aktiflestirilmesi\"><\/span>UFW (Uncomplicated Firewall) Kurulumu ve Aktifle\u015ftirilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>UFW, karma\u015f\u0131k `iptables` kurallar\u0131n\u0131 y\u00f6netmeyi basitle\u015ftiren, kullan\u0131c\u0131 dostu bir g\u00fcvenlik duvar\u0131 arac\u0131d\u0131r. \u00c7o\u011fu Ubuntu da\u011f\u0131t\u0131m\u0131nda \u00f6nceden y\u00fcklenmi\u015f olarak gelir. E\u011fer y\u00fckl\u00fc de\u011filse, <code>sudo apt update && sudo apt install ufw<\/code> komutuyla kolayca kurabilirsiniz. Kurulumdan sonra ilk yapman\u0131z gereken, d\u0131\u015far\u0131dan eri\u015fime izin verece\u011finiz temel kurallar\u0131 tan\u0131mlamakt\u0131r. En \u00f6nemlisi, mevcut SSH ba\u011flant\u0131n\u0131z\u0131 kaybetmemek i\u00e7in SSH portuna izin vermelisiniz. E\u011fer portu de\u011fi\u015ftirdiyseniz, yeni port numaras\u0131n\u0131 kullanarak <code>sudo ufw allow YENI_SSH_PORTU\/tcp<\/code> komutunu \u00e7al\u0131\u015ft\u0131r\u0131n. Kurallar\u0131 ekledikten sonra, <code>sudo ufw enable<\/code> komutu ile g\u00fcvenlik duvar\u0131n\u0131 aktif hale getirebilirsiniz. UFW, sistem ba\u015flang\u0131c\u0131nda otomatik olarak \u00e7al\u0131\u015facak \u015fekilde ayarlanacakt\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Temel-Servisler-Icin-SSH-HTTP-HTTPS-Erisim-Kurallarini-Tanimlama\"><\/span>Temel Servisler \u0130\u00e7in (SSH, HTTP, HTTPS) Eri\u015fim Kurallar\u0131n\u0131 Tan\u0131mlama<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>G\u00fcvenlik duvar\u0131n\u0131z aktif hale geldikten sonra, sunucunuzda \u00e7al\u0131\u015ft\u0131rmay\u0131 planlad\u0131\u011f\u0131n\u0131z di\u011fer servisler i\u00e7in de eri\u015fim kurallar\u0131 tan\u0131mlaman\u0131z gerekir. UFW, yayg\u0131n servislerin isimlerini tan\u0131d\u0131\u011f\u0131 i\u00e7in bu i\u015flemi olduk\u00e7a kolayla\u015ft\u0131r\u0131r. \u00d6rne\u011fin, standart bir web sunucusu i\u00e7in HTTP ve HTTPS trafi\u011fine izin vermek \u00fczere a\u015fa\u011f\u0131daki komutlar\u0131 kullanabilirsiniz:<\/p>\n<ul>\n<li><code>sudo ufw allow ssh<\/code> (E\u011fer varsay\u0131lan port 22&#8217;yi kullan\u0131yorsan\u0131z)<\/li>\n<li><code>sudo ufw allow http<\/code> (Port 80 i\u00e7in)<\/li>\n<li><code>sudo ufw allow https<\/code> (Port 443 i\u00e7in)<\/li>\n<\/ul>\n<p>Ekledi\u011finiz kurallar\u0131 ve g\u00fcvenlik duvar\u0131n\u0131n mevcut durumunu g\u00f6rmek i\u00e7in <code>sudo ufw status verbose<\/code> komutunu \u00e7al\u0131\u015ft\u0131rabilirsiniz. Bu komut size aktif kurallar\u0131n detayl\u0131 bir listesini sunacakt\u0131r.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>Servis Ad\u0131<\/th>\n<th>Protokol<\/th>\n<th>Varsay\u0131lan Port Numaras\u0131<\/th>\n<th>UFW Komutu<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>SSH<\/strong><\/td>\n<td>TCP<\/td>\n<td>22<\/td>\n<td><code>sudo ufw allow ssh<\/code><\/td>\n<\/tr>\n<tr>\n<td><strong>HTTP<\/strong><\/td>\n<td>TCP<\/td>\n<td>80<\/td>\n<td><code>sudo ufw allow http<\/code><\/td>\n<\/tr>\n<tr>\n<td><strong>HTTPS<\/strong><\/td>\n<td>TCP<\/td>\n<td>443<\/td>\n<td><code>sudo ufw allow https<\/code><\/td>\n<\/tr>\n<tr>\n<td><strong>FTP<\/strong><\/td>\n<td>TCP<\/td>\n<td>21<\/td>\n<td><code>sudo ufw allow ftp<\/code><\/td>\n<\/tr>\n<tr>\n<td><strong>SMTP (E-posta G\u00f6nderim)<\/strong><\/td>\n<td>TCP<\/td>\n<td>25, 587<\/td>\n<td><code>sudo ufw allow smtps<\/code><\/td>\n<\/tr>\n<tr>\n<td><strong>POP3 (E-posta Al\u0131m)<\/strong><\/td>\n<td>TCP<\/td>\n<td>995<\/td>\n<td><code>sudo ufw allow pop3s<\/code><\/td>\n<\/tr>\n<tr>\n<td><strong>IMAP (E-posta Al\u0131m)<\/strong><\/td>\n<td>TCP<\/td>\n<td>993<\/td>\n<td><code>sudo ufw allow imaps<\/code><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"Sistem-Guncellemeleri-ve-Temel-Paketler\"><\/span>Sistem G\u00fcncellemeleri ve Temel Paketler<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Sunucunuzun ilk g\u00fcvenlik ayarlar\u0131n\u0131 tamamlad\u0131ktan sonraki ad\u0131m, i\u015fletim sistemini ve \u00fczerinde \u00e7al\u0131\u015fan yaz\u0131l\u0131mlar\u0131 en g\u00fcncel ve g\u00fcvenli s\u00fcr\u00fcmlerine getirmektir. Yaz\u0131l\u0131m g\u00fcncellemeleri, genellikle ke\u015ffedilen g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 kapatan yamalar i\u00e7erir. Bu nedenle, sistemi d\u00fczenli olarak g\u00fcncellemek, proaktif bir g\u00fcvenlik stratejisinin temel ta\u015f\u0131d\u0131r. Ayr\u0131ca, sunucu y\u00f6netimini kolayla\u015ft\u0131racak baz\u0131 yard\u0131mc\u0131 ara\u00e7lar\u0131 ve otomatik sald\u0131r\u0131lara kar\u015f\u0131 koruma sa\u011flayacak ek bir g\u00fcvenlik katman\u0131n\u0131 kurmak da bu a\u015famada at\u0131lacak ak\u0131ll\u0131ca ad\u0131mlard\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Paket-Depolarini-ve-Mevcut-Paketleri-Guncelleme\"><\/span>Paket Depolar\u0131n\u0131 ve Mevcut Paketleri G\u00fcncelleme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130\u015fletim sisteminiz, yaz\u0131l\u0131mlar\u0131 &#8220;paket depolar\u0131&#8221; ad\u0131 verilen merkezi kaynaklardan al\u0131r. \u0130lk olarak, sisteminizin bu depolar hakk\u0131nda en g\u00fcncel bilgiye sahip olmas\u0131 i\u00e7in paket listesini yenilemeniz gerekir. Debian\/Ubuntu tabanl\u0131 sistemlerde bu i\u015flem <code>sudo apt update<\/code> komutuyla yap\u0131l\u0131r. Paket listesi g\u00fcncellendikten sonra, sistemde kurulu olan t\u00fcm yaz\u0131l\u0131mlar\u0131 en son s\u00fcr\u00fcmlerine y\u00fckseltmek i\u00e7in <code>sudo apt upgrade -y<\/code> komutunu \u00e7al\u0131\u015ft\u0131rabilirsiniz. Bu iki komutu birle\u015ftirerek <code>sudo apt update && sudo apt upgrade -y<\/code> \u015feklinde kullanmak yayg\u0131n bir pratiktir ve sunucunuzun t\u00fcm yaz\u0131l\u0131msal bile\u015fenlerinin g\u00fcncel kalmas\u0131n\u0131 sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sik-Kullanilan-Yardimci-Araclarin-Kurulumu-htop-ncdu-vb\"><\/span>S\u0131k Kullan\u0131lan Yard\u0131mc\u0131 Ara\u00e7lar\u0131n Kurulumu (htop, ncdu vb.)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Varsay\u0131lan <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/\" target=\"_blank\">sunucu<\/a> kurulumlar\u0131 genellikle minimal d\u00fczeydedir ve y\u00f6netimi kolayla\u015ft\u0131racak baz\u0131 ara\u00e7lar\u0131 i\u00e7ermeyebilir. Bu a\u015famada, i\u015flerinizi kolayla\u015ft\u0131racak birka\u00e7 temel paketi kurmakta fayda var. <code>htop<\/code>, sistem kaynak kullan\u0131m\u0131n\u0131 (CPU, RAM) interaktif ve anla\u015f\u0131l\u0131r bir \u015fekilde g\u00f6steren geli\u015fmi\u015f bir g\u00f6rev y\u00f6neticisidir. <code>ncdu<\/code>, disk alan\u0131n\u0131 hangi dosya ve klas\u00f6rlerin ne kadar kaplad\u0131\u011f\u0131n\u0131 analiz etmenizi sa\u011flayan \u00e7ok kullan\u0131\u015fl\u0131 bir ara\u00e7t\u0131r. <code>curl<\/code> ve <code>wget<\/code> ise komut sat\u0131r\u0131ndan dosya indirmek veya web istekleri yapmak i\u00e7in kullan\u0131l\u0131r. Bu paketleri <code>sudo apt install htop ncdu curl wget<\/code> komutuyla tek seferde kurabilirsiniz.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Brute-Force-Saldirilarina-Karsi-Fail2Ban-Kurulumu-ve-Yapilandirmasi\"><\/span>Brute-Force Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Fail2Ban Kurulumu ve Yap\u0131land\u0131rmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Fail2Ban, sunucu log dosyalar\u0131n\u0131 s\u00fcrekli olarak izleyen ve \u015f\u00fcpheli aktiviteleri (\u00f6rne\u011fin, \u00e7ok say\u0131da hatal\u0131 parola denemesi) tespit etti\u011finde ilgili IP adresini otomatik olarak g\u00fcvenlik duvar\u0131 \u00fczerinden engelleyen bir yaz\u0131l\u0131md\u0131r. \u00d6zellikle SSH ve di\u011fer servislerinize y\u00f6nelik yap\u0131lan <a href=\"https:\/\/www.ihs.com.tr\/blog\/brute-force-saldirilarini-onlemek-icin-en-etkili-yontemler-ve-eklentiler\/\" target=\"_blank\">kaba kuvvet (brute-force) sald\u0131r\u0131lar\u0131n\u0131<\/a> \u00f6nlemede son derece etkilidir. Kurulumu <code>sudo apt install fail2ban<\/code> komutuyla olduk\u00e7a basittir. Kurulduktan sonra, Fail2Ban varsay\u0131lan ayarlar\u0131yla SSH servisini korumaya ba\u015flar. Daha geli\u015fmi\u015f yap\u0131land\u0131rmalar i\u00e7in <code>\/etc\/fail2ban\/jail.local<\/code> ad\u0131nda bir yap\u0131land\u0131rma dosyas\u0131 olu\u015fturarak hangi servislerin, hangi ko\u015fullarda ve ne kadar s\u00fcreyle engellenece\u011fini \u00f6zelle\u015ftirebilirsiniz. Bu, otomatik sald\u0131r\u0131lara kar\u015f\u0131 ek ve dinamik bir koruma katman\u0131 sa\u011flar.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Guvenli-ve-Performansli-VPS-Hizmeti-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\"><\/span>G\u00fcvenli ve Performansl\u0131 VPS Hizmeti \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Projenizin ba\u015far\u0131s\u0131, \u00fczerine in\u015fa edildi\u011fi temel kadar sa\u011flamd\u0131r ve bu temel, se\u00e7ti\u011finiz VPS hizmetinin kalitesidir. Yeni bir VPS ald\u0131ktan sonra yap\u0131lmas\u0131 gereken bu kritik g\u00fcvenlik ad\u0131mlar\u0131n\u0131 uygulayabilmek i\u00e7in \u00f6ncelikle g\u00fcvenilir, performansl\u0131 ve destek odakl\u0131 bir altyap\u0131ya sahip olman\u0131z gerekir. Bu noktada, T\u00fcrkiye&#8217;nin lider veri merkezi ve <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/\" target=\"_blank\">hosting<\/a> sa\u011flay\u0131c\u0131lar\u0131ndan biri olan \u0130HS Telekom, sundu\u011fu \u00fcst\u00fcn VPS hizmetleriyle \u00f6ne \u00e7\u0131kmaktad\u0131r. \u0130HS Telekom&#8217;u tercih etmek, projenize en ba\u015f\u0131ndan itibaren g\u00fc\u00e7l\u00fc bir ba\u015flang\u0131\u00e7 yapman\u0131z\u0131 sa\u011flar.<\/p>\n<p>\u0130HS Telekom, T\u00fcrkiye&#8217;nin en iyi VPS sa\u011flay\u0131c\u0131s\u0131 olarak kabul edilmesinin ard\u0131nda yatan bir\u00e7ok nedene sahiptir. \u00d6ncelikle, sunucular\u0131n tamam\u0131 T\u00fcrkiye lokasyonludur. Bu, sitenize veya uygulaman\u0131za T\u00fcrkiye&#8217;den eri\u015fen kullan\u0131c\u0131lar i\u00e7in minimum gecikme (latency) ve maksimum h\u0131z anlam\u0131na gelir; bu da hem kullan\u0131c\u0131 deneyimi hem de SEO performans\u0131 i\u00e7in kritik bir avantajd\u0131r. Y\u00fcksek performansl\u0131 NVMe SSD diskler ve en yeni nesil Intel i\u015flemcilerle donat\u0131lm\u0131\u015f altyap\u0131s\u0131, en yo\u011fun anlarda bile projelerinizin kesintisiz ve h\u0131zl\u0131 \u00e7al\u0131\u015fmas\u0131n\u0131 garanti eder.<\/p>\n<p>G\u00fcvenlik, \u0130HS Telekom&#8217;un en \u00e7ok \u00f6nem verdi\u011fi konulardan biridir. Geli\u015fmi\u015f DDoS korumas\u0131, t\u00fcm VPS paketlerinde standart olarak sunularak sitenizi k\u00f6t\u00fc niyetli sald\u0131r\u0131lara kar\u015f\u0131 korur. Ayr\u0131ca, g\u00fc\u00e7l\u00fc ve yedekli a\u011f altyap\u0131s\u0131 sayesinde y\u00fcksek uptime oranlar\u0131 sunarak projelerinizin s\u00fcrekli eri\u015filebilir olmas\u0131n\u0131 sa\u011flar. \u0130htiya\u00e7 duydu\u011funuz her an yan\u0131n\u0131zda olan 7\/24 uzman teknik destek ekibi, olas\u0131 sorunlar\u0131n\u0131za h\u0131zl\u0131 ve etkili \u00e7\u00f6z\u00fcmler sunarak i\u015flerinizin aksamas\u0131na izin vermez. Projenizin b\u00fcy\u00fcmesine paralel olarak kaynaklar\u0131n\u0131z\u0131 kolayca art\u0131rman\u0131za olanak tan\u0131yan esnek paket yap\u0131lar\u0131 ile \u0130HS Telekom, yaln\u0131zca bir servis sa\u011flay\u0131c\u0131 de\u011fil, ayn\u0131 zamanda projenizin yolculu\u011funda g\u00fcvenilir bir teknoloji orta\u011f\u0131d\u0131r. Bu nedenlerle, g\u00fcvenli, h\u0131zl\u0131 ve kesintisiz bir VPS deneyimi i\u00e7in \u0130HS Telekom en do\u011fru tercihtir.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Yeni bir Sanal \u00d6zel Sunucu (VPS) sahibi olmak, dijital d\u00fcnyada kendi alan\u0131n\u0131z\u0131 yaratman\u0131n heyecan verici bir ilk ad\u0131m\u0131d\u0131r. Ancak bu bo\u015f tuval,&hellip;<\/p>\n","protected":false},"author":3,"featured_media":16341,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[414],"tags":[],"class_list":["post-16340","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sunucu"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16340","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=16340"}],"version-history":[{"count":1,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16340\/revisions"}],"predecessor-version":[{"id":16342,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16340\/revisions\/16342"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/16341"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=16340"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=16340"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=16340"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}