{"id":16411,"date":"2026-08-19T23:13:01","date_gmt":"2026-08-19T20:13:01","guid":{"rendered":"https:\/\/www.ihs.com.tr\/blog\/?p=16411"},"modified":"2026-08-19T23:13:01","modified_gmt":"2026-08-19T20:13:01","slug":"yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/","title":{"rendered":"Yerel G\u00fcvenlik Duvar\u0131 (UFW) \u0130lk Kurulumu ve Temel Kurallar\u0131"},"content":{"rendered":"<p>Dijital d\u00fcnyada sunucu g\u00fcvenli\u011fi, veri b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc ve hizmet s\u00fcreklili\u011fini sa\u011flaman\u0131n temel ta\u015f\u0131d\u0131r. Sunucular, internet \u00fczerinden s\u00fcrekli olarak \u00e7e\u015fitli ba\u011flant\u0131 isteklerine maruz kal\u0131r ve bu isteklerin hepsi iyi niyetli de\u011fildir. Bu noktada, sunucuya gelen ve sunucudan giden a\u011f trafi\u011fini kontrol eden, filtreleyen ve yetkisiz eri\u015fimleri engelleyen bir g\u00fcvenlik duvar\u0131 (firewall) kullanmak kritik bir \u00f6neme sahiptir. Ubuntu ve di\u011fer Debian tabanl\u0131 sistemlerde g\u00fcvenlik duvar\u0131 y\u00f6netimini basitle\u015ftirmek i\u00e7in geli\u015ftirilen UFW (Uncomplicated Firewall), karma\u015f\u0131k `iptables` komutlar\u0131na harika bir alternatiftir. Bu rehberde, UFW&#8217;nin kurulumundan temel ve geli\u015fmi\u015f kural tan\u0131mlamalar\u0131na, g\u00fcnl\u00fck kay\u0131tlar\u0131n\u0131n izlenmesinden pratik yap\u0131land\u0131rma senaryolar\u0131na kadar t\u00fcm detaylar\u0131 ad\u0131m ad\u0131m ele alaca\u011f\u0131z.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_77 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7erik Tablosu<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6a86d75ca666d\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\" id=\"ez-toc-cssicon-toggle-item-6a86d75ca666d\" aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#UFWye-Giris-ve-Temel-Kavramlar\" >UFW&#8217;ye Giri\u015f ve Temel Kavramlar<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Guvenlik-Duvari-Firewall-Nedir\" >G\u00fcvenlik Duvar\u0131 (Firewall) Nedir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#UFW-Uncomplicated-Firewall-Nedir-ve-Neden-Kullanilir\" >UFW (Uncomplicated Firewall) Nedir ve Neden Kullan\u0131l\u0131r?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#UFWnin-iptablesa-Gore-Avantajlari\" >UFW&#8217;nin `iptables`&#8217;a G\u00f6re Avantajlar\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#UFW-Kurulumu-ve-Baslangic-Ayarlari\" >UFW Kurulumu ve Ba\u015flang\u0131\u00e7 Ayarlar\u0131<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Kurulum-Oncesi-Gereksinimler-ve-Sistem-Kontrolu\" >Kurulum \u00d6ncesi Gereksinimler ve Sistem Kontrol\u00fc<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Ubuntu-ve-Debian-Tabanli-Sistemlerde-UFW-Kurulumu\" >Ubuntu ve Debian Tabanl\u0131 Sistemlerde UFW Kurulumu<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#UFWnin-Mevcut-Durumunu-Kontrol-Etme\" >UFW&#8217;nin Mevcut Durumunu Kontrol Etme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#UFWyi-Etkinlestirme-ve-Devre-Disi-Birakma\" >UFW&#8217;yi Etkinle\u015ftirme ve Devre D\u0131\u015f\u0131 B\u0131rakma<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Varsayilan-Politikalarin-Yapilandirilmasi\" >Varsay\u0131lan Politikalar\u0131n Yap\u0131land\u0131r\u0131lmas\u0131<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Guvenlik-Duvari-Politikalarinin-Onemi\" >G\u00fcvenlik Duvar\u0131 Politikalar\u0131n\u0131n \u00d6nemi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Gelen-Baglantilar-Icin-Varsayilan-Reddetme-Kurali-Default-Deny-Incoming\" >Gelen Ba\u011flant\u0131lar \u0130\u00e7in Varsay\u0131lan Reddetme Kural\u0131 (Default Deny Incoming)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Giden-Baglantilar-Icin-Varsayilan-Izin-Verme-Kurali-Default-Allow-Outgoing\" >Giden Ba\u011flant\u0131lar \u0130\u00e7in Varsay\u0131lan \u0130zin Verme Kural\u0131 (Default Allow Outgoing)<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Temel-Servis-ve-Portlar-Icin-Izin-Kurallari-Olusturma\" >Temel Servis ve Portlar \u0130\u00e7in \u0130zin Kurallar\u0131 Olu\u015fturma<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Uygulama-Profilleri-ile-Izin-Verme\" >Uygulama Profilleri ile \u0130zin Verme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Servis-Isimleriyle-Izin-Verme-Orn-SSH-HTTP-HTTPS\" >Servis \u0130simleriyle \u0130zin Verme (\u00d6rn: SSH, HTTP, HTTPS)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Port-Numarasi-ile-Izin-Verme\" >Port Numaras\u0131 ile \u0130zin Verme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Protokol-Belirterek-Kural-Olusturma-TCP-ve-UDP\" >Protokol Belirterek Kural Olu\u015fturma (TCP ve UDP)<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Gelismis-Kural-Tanimlama\" >Geli\u015fmi\u015f Kural Tan\u0131mlama<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Belirli-Bir-IP-Adresine-Izin-Verme\" >Belirli Bir IP Adresine \u0130zin Verme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Belirli-Bir-Alt-Aga-Subnet-Izin-Verme\" >Belirli Bir Alt A\u011fa (Subnet) \u0130zin Verme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Belirli-Bir-IP-Adresinin-Belirli-Bir-Porta-Erismesine-Izin-Verme\" >Belirli Bir IP Adresinin Belirli Bir Porta Eri\u015fmesine \u0130zin Verme<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Kural-Yonetimi-Listeleme-ve-Silme\" >Kural Y\u00f6netimi: Listeleme ve Silme<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Mevcut-Kurallari-Listeleme\" >Mevcut Kurallar\u0131 Listeleme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Eklenmis-Kurallari-Silme\" >Eklenmi\u015f Kurallar\u0131 Silme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Tum-Kurallari-Sifirlama-Reset\" >T\u00fcm Kurallar\u0131 S\u0131f\u0131rlama (Reset)<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-27\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Baglantilari-Reddetme-ve-Sinirlama-Deny-ve-Limit\" >Ba\u011flant\u0131lar\u0131 Reddetme ve S\u0131n\u0131rlama (Deny ve Limit)<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-28\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Belirli-Baglantilari-Acikca-Reddetme-Deny\" >Belirli Ba\u011flant\u0131lar\u0131 A\u00e7\u0131k\u00e7a Reddetme (Deny)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-29\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Kaba-Kuvvet-Brute-Force-Saldirilarina-Karsi-Baglanti-Sinirlama-Limit\" >Kaba Kuvvet (Brute-Force) Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Ba\u011flant\u0131 S\u0131n\u0131rlama (Limit)<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-30\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#UFW-Gunluk-Kayitlari-Logging-ve-Izleme\" >UFW G\u00fcnl\u00fck Kay\u0131tlar\u0131 (Logging) ve \u0130zleme<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-31\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Gunluk-Kaydini-Etkinlestirme-ve-Kapatma\" >G\u00fcnl\u00fck Kayd\u0131n\u0131 Etkinle\u015ftirme ve Kapatma<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-32\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Gunluk-Seviyelerini-Ayarlama\" >G\u00fcnl\u00fck Seviyelerini Ayarlama<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-33\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#UFW-Gunluk-Dosyalarini-Okuma-ve-Anlama\" >UFW G\u00fcnl\u00fck Dosyalar\u0131n\u0131 Okuma ve Anlama<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-34\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Pratik-Bir-Senaryo-Web-Sunucusu-Yapilandirmasi\" >Pratik Bir Senaryo: Web Sunucusu Yap\u0131land\u0131rmas\u0131<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-35\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#SSH-HTTP-ve-HTTPS-Trafigine-Izin-Verme\" >SSH, HTTP ve HTTPS Trafi\u011fine \u0130zin Verme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-36\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Gereksiz-Portlarin-Kapali-Oldugundan-Emin-Olma\" >Gereksiz Portlar\u0131n Kapal\u0131 Oldu\u011fundan Emin Olma<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-37\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Yapilandirmayi-Etkinlestirme-ve-Test-Etme\" >Yap\u0131land\u0131rmay\u0131 Etkinle\u015ftirme ve Test Etme<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-38\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Sunucu-Guvenliginiz-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\" >Sunucu G\u00fcvenli\u011finiz \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-39\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Yonetilen-Guvenlik-Duvari-Cozumleri\" >Y\u00f6netilen G\u00fcvenlik Duvar\u0131 \u00c7\u00f6z\u00fcmleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-40\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#DDoS-Korumasi-ve-Gelismis-Tehdit-Onleme-Sistemleri\" >DDoS Korumas\u0131 ve Geli\u015fmi\u015f Tehdit \u00d6nleme Sistemleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-41\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#724-Uzman-Guvenlik-Destegi\" >7\/24 Uzman G\u00fcvenlik Deste\u011fi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-42\" href=\"https:\/\/www.ihs.com.tr\/blog\/yerel-guvenlik-duvari-ufw-ilk-kurulumu-ve-temel-kurallari\/#Yuksek-Performansli-ve-Guvenli-Veri-Merkezi-Altyapisi\" >Y\u00fcksek Performansl\u0131 ve G\u00fcvenli Veri Merkezi Altyap\u0131s\u0131<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"UFWye-Giris-ve-Temel-Kavramlar\"><\/span>UFW&#8217;ye Giri\u015f ve Temel Kavramlar<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Sunucu g\u00fcvenli\u011finin ilk savunma hatt\u0131 olan g\u00fcvenlik duvarlar\u0131n\u0131 ve bu alanda UFW&#8217;nin neden pop\u00fcler bir tercih oldu\u011funu anlamak, do\u011fru bir yap\u0131land\u0131rma i\u00e7in ilk ad\u0131md\u0131r. UFW, \u00f6zellikle Linux&#8217;a yeni ba\u015flayan kullan\u0131c\u0131lar i\u00e7in g\u00fcvenlik duvar\u0131 y\u00f6netimini kolayla\u015ft\u0131rarak sunucu g\u00fcvenli\u011fini art\u0131rmay\u0131 hedefler.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenlik-Duvari-Firewall-Nedir\"><\/span>G\u00fcvenlik Duvar\u0131 (Firewall) Nedir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>G\u00fcvenlik duvar\u0131 (Firewall), en basit tan\u0131m\u0131yla, bir a\u011f ile di\u011feri aras\u0131nda (\u00f6rne\u011fin, internet ile yerel sunucu a\u011f\u0131n\u0131z aras\u0131nda) bir bariyer g\u00f6revi g\u00f6ren bir g\u00fcvenlik sistemidir. \u00d6nceden tan\u0131mlanm\u0131\u015f kurallar b\u00fct\u00fcn\u00fcne g\u00f6re a\u011f trafi\u011fini analiz eder ve hangi veri paketlerinin ge\u00e7ip hangilerinin engellenece\u011fine karar verir. Temel amac\u0131, siber sald\u0131r\u0131lar\u0131, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131 ve yetkisiz eri\u015fim giri\u015fimlerini engelleyerek sunucunun veya a\u011f\u0131n g\u00fcvenli\u011fini sa\u011flamakt\u0131r. Bir <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vds-sunucu.html\" target=\"_blank\">VDS<\/a> \u00fczerinde \u00e7al\u0131\u015fan uygulamalar\u0131n sadece gerekli portlardan ileti\u015fim kurmas\u0131n\u0131 sa\u011flamak, g\u00fcvenlik duvar\u0131n\u0131n en temel g\u00f6revlerinden biridir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"UFW-Uncomplicated-Firewall-Nedir-ve-Neden-Kullanilir\"><\/span>UFW (Uncomplicated Firewall) Nedir ve Neden Kullan\u0131l\u0131r?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>UFW, &#8220;Uncomplicated Firewall&#8221; (Karma\u015f\u0131k Olmayan G\u00fcvenlik Duvar\u0131) ifadesinin k\u0131saltmas\u0131d\u0131r. Ubuntu da\u011f\u0131t\u0131m\u0131yla birlikte varsay\u0131lan olarak gelen, `iptables` i\u00e7in kullan\u0131c\u0131 dostu bir aray\u00fczd\u00fcr. Temel amac\u0131, Linux&#8217;ta g\u00fcvenlik duvar\u0131 yap\u0131land\u0131rmas\u0131n\u0131 son derece basit hale getirmektir. Komut sat\u0131r\u0131 \u00fczerinden birka\u00e7 basit ve anla\u015f\u0131l\u0131r komutla, karma\u015f\u0131k g\u00fcvenlik kurallar\u0131n\u0131 kolayca olu\u015fturman\u0131za olanak tan\u0131r. \u00d6zellikle sunucu y\u00f6netimine yeni ba\u015flayanlar veya h\u0131zl\u0131 ve etkili bir g\u00fcvenlik duvar\u0131 \u00e7\u00f6z\u00fcm\u00fc arayanlar i\u00e7in idealdir. UFW, karma\u015f\u0131kl\u0131\u011f\u0131 ortadan kald\u0131rarak g\u00fcvenlikten \u00f6d\u00fcn vermeden kullan\u0131m kolayl\u0131\u011f\u0131 sunar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"UFWnin-iptablesa-Gore-Avantajlari\"><\/span>UFW&#8217;nin `iptables`&#8217;a G\u00f6re Avantajlar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>`iptables`, Linux \u00e7ekirde\u011finin netfilter mod\u00fcl\u00fcn\u00fc y\u00f6netmek i\u00e7in kullan\u0131lan g\u00fc\u00e7l\u00fc ve esnek bir ara\u00e7t\u0131r, ancak s\u00f6z dizimi (syntax) olduk\u00e7a karma\u015f\u0131k ve \u00f6\u011frenmesi zordur. UFW, bu karma\u015f\u0131kl\u0131\u011f\u0131 ortadan kald\u0131ran \u00f6nemli avantajlar sunar.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>\u00d6zellik<\/th>\n<th>UFW (Uncomplicated Firewall)<\/th>\n<th>iptables<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Kullan\u0131m Kolayl\u0131\u011f\u0131<\/strong><\/td>\n<td>Basit ve sezgisel komutlar. \u00d6rn: `ufw allow ssh`<\/td>\n<td>Karma\u015f\u0131k ve uzun komut zincirleri. \u00d6rn: `iptables -A INPUT -p tcp &#8211;dport 22 -j ACCEPT`<\/td>\n<\/tr>\n<tr>\n<td><strong>\u00d6\u011frenme E\u011frisi<\/strong><\/td>\n<td>D\u00fc\u015f\u00fck. Yeni ba\u015flayanlar i\u00e7in ideal.<\/td>\n<td>Y\u00fcksek. Uzmanl\u0131k ve detayl\u0131 bilgi gerektirir.<\/td>\n<\/tr>\n<tr>\n<td><strong>Yap\u0131land\u0131rma H\u0131z\u0131<\/strong><\/td>\n<td>H\u0131zl\u0131 ve pratiktir. Birka\u00e7 komutla temel g\u00fcvenlik sa\u011flanabilir.<\/td>\n<td>Detayl\u0131 ve zaman al\u0131c\u0131d\u0131r. Her kural i\u00e7in spesifik parametreler gerekir.<\/td>\n<\/tr>\n<tr>\n<td><strong>Uygulama Profilleri<\/strong><\/td>\n<td>Pop\u00fcler uygulamalar (SSH, HTTP vb.) i\u00e7in haz\u0131r profiller sunar.<\/td>\n<td>Profil deste\u011fi yoktur, her servis i\u00e7in port ve protokol manuel girilmelidir.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"UFW-Kurulumu-ve-Baslangic-Ayarlari\"><\/span>UFW Kurulumu ve Ba\u015flang\u0131\u00e7 Ayarlar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>UFW&#8217;yi kullanmaya ba\u015flamadan \u00f6nce sisteminizde kurulu olup olmad\u0131\u011f\u0131n\u0131 kontrol etmeli ve temel etkinle\u015ftirme ayarlar\u0131n\u0131 yapmal\u0131s\u0131n\u0131z. \u00c7o\u011fu Ubuntu s\u00fcr\u00fcm\u00fcnde UFW varsay\u0131lan olarak y\u00fckl\u00fc gelse de, minimal kurulumlarda veya di\u011fer Debian tabanl\u0131 da\u011f\u0131t\u0131mlarda manuel kurulum gerekebilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kurulum-Oncesi-Gereksinimler-ve-Sistem-Kontrolu\"><\/span>Kurulum \u00d6ncesi Gereksinimler ve Sistem Kontrol\u00fc<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Kuruluma ba\u015flamadan \u00f6nce, sisteminizde root veya `sudo` yetkilerine sahip bir kullan\u0131c\u0131yla oturum a\u00e7t\u0131\u011f\u0131n\u0131zdan emin olmal\u0131s\u0131n\u0131z. Ayr\u0131ca, sisteminizin paket listelerinin g\u00fcncel olmas\u0131, olas\u0131 ba\u011f\u0131ml\u0131l\u0131k sorunlar\u0131n\u0131 \u00f6nleyecektir. A\u015fa\u011f\u0131daki komutla paket listenizi g\u00fcncelleyebilirsiniz:<\/p>\n<p><code>sudo apt update<\/code><\/p>\n<p>Bu i\u015flem, sisteminizin en g\u00fcncel paket bilgilerine sahip olmas\u0131n\u0131 sa\u011flar ve kurulumun sorunsuz ilerlemesine yard\u0131mc\u0131 olur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ubuntu-ve-Debian-Tabanli-Sistemlerde-UFW-Kurulumu\"><\/span>Ubuntu ve Debian Tabanl\u0131 Sistemlerde UFW Kurulumu<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>UFW, Ubuntu&#8217;nun paket depolar\u0131nda mevcuttur. E\u011fer sisteminizde y\u00fckl\u00fc de\u011filse, a\u015fa\u011f\u0131daki basit komutla kolayca kurabilirsiniz:<\/p>\n<p><code>sudo apt install ufw<\/code><\/p>\n<p>Kurulum genellikle birka\u00e7 saniye i\u00e7inde tamamlan\u0131r. Bu komut, UFW paketini ve gerekli ba\u011f\u0131ml\u0131l\u0131klar\u0131 sisteminize y\u00fckleyecektir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"UFWnin-Mevcut-Durumunu-Kontrol-Etme\"><\/span>UFW&#8217;nin Mevcut Durumunu Kontrol Etme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>UFW&#8217;yi kurduktan veya etkinle\u015ftirmeden \u00f6nce mevcut durumunu kontrol etmek iyi bir pratiktir. Bu, g\u00fcvenlik duvar\u0131n\u0131n aktif olup olmad\u0131\u011f\u0131n\u0131 ve mevcut kurallar\u0131 g\u00f6rmenizi sa\u011flar. Durumu kontrol etmek i\u00e7in \u015fu komutu kullan\u0131n:<\/p>\n<p><code>sudo ufw status<\/code><\/p>\n<p>E\u011fer UFW etkin de\u011filse, komut \u00e7\u0131kt\u0131s\u0131 &#8220;Status: inactive&#8221; \u015feklinde olacakt\u0131r. Bu, g\u00fcvenlik duvar\u0131n\u0131n hen\u00fcz a\u011f trafi\u011fini filtrelemedi\u011fi anlam\u0131na gelir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"UFWyi-Etkinlestirme-ve-Devre-Disi-Birakma\"><\/span>UFW&#8217;yi Etkinle\u015ftirme ve Devre D\u0131\u015f\u0131 B\u0131rakma<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Gerekli temel kurallar\u0131 (\u00f6zellikle SSH eri\u015fim izni) ekledikten sonra UFW&#8217;yi etkinle\u015ftirebilirsiniz. Unutmay\u0131n, UFW&#8217;yi etkinle\u015ftirmeden \u00f6nce SSH ba\u011flant\u0131 noktas\u0131na izin vermezseniz, sunucuya olan mevcut ba\u011flant\u0131n\u0131z dahil t\u00fcm uzaktan eri\u015fiminiz kesilebilir. UFW&#8217;yi etkinle\u015ftirmek i\u00e7in:<\/p>\n<p><code>sudo ufw enable<\/code><\/p>\n<p>Bu komutu \u00e7al\u0131\u015ft\u0131rd\u0131\u011f\u0131n\u0131zda, sistem ba\u015flang\u0131c\u0131nda otomatik olarak \u00e7al\u0131\u015faca\u011f\u0131 konusunda bir uyar\u0131 al\u0131rs\u0131n\u0131z. &#8220;y&#8221; tu\u015funa basarak onaylay\u0131n. G\u00fcvenlik duvar\u0131n\u0131 ge\u00e7ici olarak veya kal\u0131c\u0131 olarak devre d\u0131\u015f\u0131 b\u0131rakmak isterseniz, \u015fu komutu kullanabilirsiniz:<\/p>\n<p><code>sudo ufw disable<\/code><\/p>\n<p>Bu komut, t\u00fcm filtreleme kurallar\u0131n\u0131 durdurur ve UFW&#8217;yi pasif hale getirir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Varsayilan-Politikalarin-Yapilandirilmasi\"><\/span>Varsay\u0131lan Politikalar\u0131n Yap\u0131land\u0131r\u0131lmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>G\u00fcvenlik duvar\u0131 yap\u0131land\u0131rmas\u0131n\u0131n en \u00f6nemli ad\u0131mlar\u0131ndan biri, varsay\u0131lan politikalar\u0131 belirlemektir. Bu politikalar, \u00f6zel olarak bir kural taraf\u0131ndan e\u015fle\u015fmeyen t\u00fcm trafik i\u00e7in ne yap\u0131laca\u011f\u0131n\u0131 tan\u0131mlar. G\u00fcvenli bir ba\u015flang\u0131\u00e7 noktas\u0131 i\u00e7in genellikle &#8220;varsay\u0131lan olarak reddet&#8221; yakla\u015f\u0131m\u0131 benimsenir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenlik-Duvari-Politikalarinin-Onemi\"><\/span>G\u00fcvenlik Duvar\u0131 Politikalar\u0131n\u0131n \u00d6nemi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Varsay\u0131lan politikalar, g\u00fcvenlik duvar\u0131n\u0131z\u0131n temel davran\u0131\u015f\u0131n\u0131 belirler. \u0130ki ana trafik y\u00f6n\u00fc vard\u0131r: gelen (incoming) ve giden (outgoing). Gelen trafik, internetten sunucunuza do\u011fru olan ba\u011flant\u0131lar\u0131; giden trafik ise sunucunuzdan internete do\u011fru olan ba\u011flant\u0131lar\u0131 ifade eder. G\u00fcvenlik a\u00e7\u0131s\u0131ndan en iyi pratik, t\u00fcm gelen trafi\u011fi varsay\u0131lan olarak engellemek ve yaln\u0131zca ihtiya\u00e7 duyulan belirli servislere izin vermektir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Gelen-Baglantilar-Icin-Varsayilan-Reddetme-Kurali-Default-Deny-Incoming\"><\/span>Gelen Ba\u011flant\u0131lar \u0130\u00e7in Varsay\u0131lan Reddetme Kural\u0131 (Default Deny Incoming)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bu politika, d\u0131\u015far\u0131dan sunucunuza gelen t\u00fcm ba\u011flant\u0131 isteklerini, siz a\u00e7\u0131k\u00e7a bir izin kural\u0131 tan\u0131mlamad\u0131\u011f\u0131n\u0131z s\u00fcrece, otomatik olarak engeller. Bu, sunucunuzu bilinmeyen veya istenmeyen ba\u011flant\u0131 giri\u015fimlerine kar\u015f\u0131 koruman\u0131n en etkili yoludur. Bu kural\u0131 ayarlamak i\u00e7in a\u015fa\u011f\u0131daki komutu kullan\u0131n:<\/p>\n<p><code>sudo ufw default deny incoming<\/code><\/p>\n<p>Bu ayar yap\u0131ld\u0131ktan sonra, sunucunuza hi\u00e7bir port \u00fczerinden eri\u015filemez, ta ki siz `ufw allow` komutuyla belirli portlara veya servislere izin verene kadar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Giden-Baglantilar-Icin-Varsayilan-Izin-Verme-Kurali-Default-Allow-Outgoing\"><\/span>Giden Ba\u011flant\u0131lar \u0130\u00e7in Varsay\u0131lan \u0130zin Verme Kural\u0131 (Default Allow Outgoing)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Genellikle, sunucunuzun d\u0131\u015f d\u00fcnya ile ileti\u015fim kurmas\u0131na (\u00f6rne\u011fin, yaz\u0131l\u0131m g\u00fcncellemelerini indirmek, API&#8217;lere ba\u011flanmak) izin verilir. Bu nedenle, giden trafik i\u00e7in varsay\u0131lan politika genellikle &#8220;izin ver&#8221; olarak ayarlan\u0131r. Bu, sunucunuzdan ba\u015flat\u0131lan t\u00fcm ba\u011flant\u0131lar\u0131n engellenmeden d\u0131\u015far\u0131 \u00e7\u0131kmas\u0131n\u0131 sa\u011flar. Bu kural\u0131 ayarlamak i\u00e7in komut \u015f\u00f6yledir:<\/p>\n<p><code>sudo ufw default allow outgoing<\/code><\/p>\n<p>Bu iki varsay\u0131lan politika (gelenleri reddet, gidenlere izin ver), \u00e7o\u011fu <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/\" target=\"_blank\">sunucu<\/a> i\u00e7in standart ve g\u00fcvenli bir ba\u015flang\u0131\u00e7 yap\u0131land\u0131rmas\u0131d\u0131r.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Temel-Servis-ve-Portlar-Icin-Izin-Kurallari-Olusturma\"><\/span>Temel Servis ve Portlar \u0130\u00e7in \u0130zin Kurallar\u0131 Olu\u015fturma<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Varsay\u0131lan olarak t\u00fcm gelen trafi\u011fi engelledikten sonra, sunucunuzun hizmet verebilmesi i\u00e7in gerekli olan belirli servislere ve portlara kontroll\u00fc bir \u015fekilde izin vermeniz gerekir. UFW, bu i\u015flemi olduk\u00e7a basit hale getiren \u00e7e\u015fitli y\u00f6ntemler sunar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Uygulama-Profilleri-ile-Izin-Verme\"><\/span>Uygulama Profilleri ile \u0130zin Verme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>UFW, kurulum s\u0131ras\u0131nda `\/etc\/ufw\/applications.d` dizininde pop\u00fcler servisler i\u00e7in uygulama profilleri olu\u015fturur. Bu profiller, servisin kulland\u0131\u011f\u0131 port numaralar\u0131n\u0131 ve protokolleri i\u00e7erir. Mevcut uygulama profillerini listelemek i\u00e7in \u015fu komutu kullanabilirsiniz:<\/p>\n<p><code>sudo ufw app list<\/code><\/p>\n<p>\u00d6rne\u011fin, &#8220;OpenSSH&#8221; profilini kullanarak SSH ba\u011flant\u0131lar\u0131na izin vermek i\u00e7in port numaras\u0131n\u0131 ezberlemenize gerek yoktur. Sadece profil ad\u0131n\u0131 kullanman\u0131z yeterlidir:<\/p>\n<p><code>sudo ufw allow 'OpenSSH'<\/code><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Servis-Isimleriyle-Izin-Verme-Orn-SSH-HTTP-HTTPS\"><\/span>Servis \u0130simleriyle \u0130zin Verme (\u00d6rn: SSH, HTTP, HTTPS)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Uygulama profillerine benzer \u015fekilde, UFW bir\u00e7ok standart servisin ismini ve varsay\u0131lan portunu bilir. Servis isimlerini kullanarak da kolayca kural ekleyebilirsiniz. Bu y\u00f6ntem, en yayg\u0131n kullan\u0131lan ve ak\u0131lda kal\u0131c\u0131 y\u00f6ntemlerden biridir.<\/p>\n<ul>\n<li><b>SSH (Port 22):<\/b> <code>sudo ufw allow ssh<\/code><\/li>\n<li><b>HTTP (Port 80):<\/b> <code>sudo ufw allow http<\/code><\/li>\n<li><b>HTTPS (Port 443):<\/b> <code>sudo ufw allow https<\/code><\/li>\n<\/ul>\n<p>Bu komutlar, ilgili servislerin standart portlar\u0131na otomatik olarak izin verir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Port-Numarasi-ile-Izin-Verme\"><\/span>Port Numaras\u0131 ile \u0130zin Verme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bazen standart olmayan bir port kullanan bir uygulaman\u0131z olabilir veya servis ismi UFW taraf\u0131ndan tan\u0131nm\u0131yor olabilir. Bu gibi durumlarda, do\u011frudan port numaras\u0131n\u0131 belirterek izin verebilirsiniz.<\/p>\n<h4>Tek Bir Porta \u0130zin Verme (\u00d6rn: 80\/tcp)<\/h4>\n<p>Belirli bir porta izin vermek i\u00e7in port numaras\u0131n\u0131 ve iste\u011fe ba\u011fl\u0131 olarak protokol\u00fc (tcp veya udp) belirtmeniz gerekir. \u00d6rne\u011fin, web sunucusu i\u00e7in 80 numaral\u0131 TCP portuna izin vermek:<\/p>\n<p><code>sudo ufw allow 80\/tcp<\/code><\/p>\n<p>E\u011fer protokol belirtmezseniz, UFW hem TCP hem de UDP i\u00e7in izin verecektir.<\/p>\n<h4>Belirli Bir Port Aral\u0131\u011f\u0131na \u0130zin Verme (\u00d6rn: 3000:4000\/tcp)<\/h4>\n<p>Baz\u0131 uygulamalar (\u00f6rne\u011fin, FTP&#8217;nin pasif modu veya baz\u0131 oyun sunucular\u0131) belirli bir port aral\u0131\u011f\u0131na eri\u015fim gerektirebilir. UFW, bu durumu da kolayca y\u00f6netmenizi sa\u011flar. \u00d6rne\u011fin, 3000 ile 4000 aras\u0131ndaki t\u00fcm TCP portlar\u0131na izin vermek i\u00e7in:<\/p>\n<p><code>sudo ufw allow 3000:4000\/tcp<\/code><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Protokol-Belirterek-Kural-Olusturma-TCP-ve-UDP\"><\/span>Protokol Belirterek Kural Olu\u015fturma (TCP ve UDP)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>A\u011f ileti\u015fiminde en yayg\u0131n iki protokol TCP ve UDP&#8217;dir. TCP (Transmission Control Protocol) g\u00fcvenilir, s\u0131ral\u0131 ve hata kontroll\u00fc bir ba\u011flant\u0131 sa\u011flarken, UDP (User Datagram Protocol) daha h\u0131zl\u0131 ancak g\u00fcvenilirli\u011fi daha d\u00fc\u015f\u00fck bir ba\u011flant\u0131s\u0131z ileti\u015fim sunar. DNS ve baz\u0131 oyunlar gibi servisler genellikle UDP kullan\u0131rken, web ve e-posta trafi\u011fi TCP kullan\u0131r. Bir kural olu\u015ftururken, g\u00fcvenli\u011fi art\u0131rmak i\u00e7in sadece uygulaman\u0131n ihtiya\u00e7 duydu\u011fu protokole izin vermek en iyisidir. \u00d6rne\u011fin, sadece 53 numaral\u0131 UDP portuna (DNS i\u00e7in) izin vermek isterseniz:<\/p>\n<p><code>sudo ufw allow 53\/udp<\/code><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Gelismis-Kural-Tanimlama\"><\/span>Geli\u015fmi\u015f Kural Tan\u0131mlama<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Temel port ve servis izinlerinin \u00f6tesinde, UFW belirli kaynaklara (IP adresleri veya a\u011flar) dayal\u0131 daha spesifik ve geli\u015fmi\u015f kurallar olu\u015fturman\u0131za da olanak tan\u0131r. Bu, g\u00fcvenli\u011fi bir katman daha art\u0131rarak yaln\u0131zca g\u00fcvenilir kaynaklardan gelen ba\u011flant\u0131lara izin vermenizi sa\u011flar. Bu t\u00fcr kurallar, \u00f6zellikle y\u00f6netim eri\u015fimini k\u0131s\u0131tlamak i\u00e7in kullan\u0131\u015fl\u0131d\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Belirli-Bir-IP-Adresine-Izin-Verme\"><\/span>Belirli Bir IP Adresine \u0130zin Verme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sunucunuza yaln\u0131zca belirli bir IP adresinden (\u00f6rne\u011fin, ofisinizin veya evinizin statik IP adresi) eri\u015filmesini istiyorsan\u0131z, bu IP adresine \u00f6zel bir izin kural\u0131 tan\u0131mlayabilirsiniz. \u00d6rne\u011fin, `192.168.1.100` IP adresinden gelen t\u00fcm ba\u011flant\u0131lara izin vermek i\u00e7in:<\/p>\n<p><code>sudo ufw allow from 192.168.1.100<\/code><\/p>\n<p>Bu kural, belirtilen IP d\u0131\u015f\u0131ndaki t\u00fcm kaynaklardan gelen ba\u011flant\u0131lar\u0131 (varsay\u0131lan reddetme politikan\u0131z aktifse) engellemeye devam ederken, yaln\u0131zca bu g\u00fcvenilir IP&#8217;ye kap\u0131y\u0131 a\u00e7ar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Belirli-Bir-Alt-Aga-Subnet-Izin-Verme\"><\/span>Belirli Bir Alt A\u011fa (Subnet) \u0130zin Verme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Tek bir IP adresi yerine, b\u00fct\u00fcn bir alt a\u011fa (subnet) eri\u015fim izni vermeniz gerekebilir. Bu, genellikle bir ofis a\u011f\u0131ndaki t\u00fcm bilgisayarlar\u0131n veya belirli bir <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vps-server.html\" target=\"_blank\">VPS<\/a> grubunun sunucuya eri\u015fmesi gerekti\u011finde kullan\u0131l\u0131r. CIDR (Classless Inter-Domain Routing) notasyonunu kullanarak bir alt a\u011f belirtebilirsiniz. \u00d6rne\u011fin, `192.168.1.0\/24` a\u011f\u0131ndaki t\u00fcm cihazlara izin vermek i\u00e7in:<\/p>\n<p><code>sudo ufw allow from 192.168.1.0\/24<\/code><\/p>\n<p>Bu kural, `192.168.1.1` ile `192.168.1.254` aras\u0131ndaki t\u00fcm IP adreslerini kapsar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Belirli-Bir-IP-Adresinin-Belirli-Bir-Porta-Erismesine-Izin-Verme\"><\/span>Belirli Bir IP Adresinin Belirli Bir Porta Eri\u015fmesine \u0130zin Verme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>En g\u00fcvenli yakla\u015f\u0131mlardan biri, eri\u015fimi hem kaynak IP adresi hem de hedef port baz\u0131nda k\u0131s\u0131tlamakt\u0131r. Bu, yaln\u0131zca belirli bir IP&#8217;nin, yaln\u0131zca belirli bir servise eri\u015febilmesini sa\u011flar. \u00d6rne\u011fin, `192.168.1.100` IP adresinin yaln\u0131zca SSH portuna (22) eri\u015fmesine izin vermek i\u00e7in \u015fu komutu kullanabilirsiniz:<\/p>\n<p><code>sudo ufw allow from 192.168.1.100 to any port 22 proto tcp<\/code><\/p>\n<p>Bu komut, `192.168.1.100` adresinden gelen TCP ba\u011flant\u0131lar\u0131n\u0131 22 numaral\u0131 porta kabul ederken, bu IP&#8217;den gelen di\u011fer t\u00fcm port isteklerini veya di\u011fer IP&#8217;lerden gelen 22. port isteklerini engeller. Ayr\u0131ca, <a href=\"https:\/\/www.ihs.com.tr\/blog\/unmanaged-yonetilmeyen-vps-nedir\/\" target=\"_blank\">y\u00f6netilmeyen vps<\/a> sunucular\u0131nda bu t\u00fcr kurallar\u0131n do\u011fru yap\u0131land\u0131r\u0131lmas\u0131 tamamen kullan\u0131c\u0131n\u0131n sorumlulu\u011fundad\u0131r.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Kural-Yonetimi-Listeleme-ve-Silme\"><\/span>Kural Y\u00f6netimi: Listeleme ve Silme<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Zamanla g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131z artabilir veya de\u011fi\u015fen ihtiya\u00e7lara g\u00f6re baz\u0131lar\u0131n\u0131 kald\u0131rman\u0131z gerekebilir. UFW, mevcut kurallar\u0131 kolayca listelemek, incelemek ve art\u0131k ihtiya\u00e7 duyulmayanlar\u0131 silmek i\u00e7in basit komutlar sunar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Mevcut-Kurallari-Listeleme\"><\/span>Mevcut Kurallar\u0131 Listeleme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Ekledi\u011finiz t\u00fcm kurallar\u0131 ve UFW&#8217;nin genel durumunu g\u00f6rmek i\u00e7in listeleme komutlar\u0131n\u0131 kullanabilirsiniz. UFW bu i\u015flem i\u00e7in iki farkl\u0131 detay seviyesi sunar.<\/p>\n<h4>Basit Kural Listesi G\u00f6r\u00fcnt\u00fcleme<\/h4>\n<p>Mevcut kurallar\u0131n basit bir listesini g\u00f6rmek i\u00e7in `status` komutunu kullanabilirsiniz. Bu komut, izin verilen ve reddedilen portlar\u0131\/servisleri \u00f6zetler.<\/p>\n<p><code>sudo ufw status<\/code><\/p>\n<p>\u00c7\u0131kt\u0131, kurallar\u0131 &#8220;To&#8221; (Hedef), &#8220;Action&#8221; (Eylem) ve &#8220;From&#8221; (Kaynak) s\u00fctunlar\u0131yla birlikte g\u00f6sterir.<\/p>\n<h4>Numaraland\u0131r\u0131lm\u0131\u015f Kural Listesi G\u00f6r\u00fcnt\u00fcleme<\/h4>\n<p>Kurallar\u0131 silmek i\u00e7in numaralar\u0131n\u0131 kullanmak genellikle daha pratiktir. Kurallar\u0131 numaraland\u0131r\u0131lm\u0131\u015f bir liste olarak g\u00f6rmek i\u00e7in `status` komutuna `numbered` parametresini ekleyin:<\/p>\n<p><code>sudo ufw status numbered<\/code><\/p>\n<p>Bu komut, her kural\u0131n ba\u015f\u0131nda bir numara ([ 1], [ 2], vb.) g\u00f6sterir. Bu numaralar, belirli bir kural\u0131 silmek istedi\u011finizde referans olarak kullan\u0131l\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Eklenmis-Kurallari-Silme\"><\/span>Eklenmi\u015f Kurallar\u0131 Silme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Art\u0131k ge\u00e7erli olmayan veya yanl\u0131\u015fl\u0131kla eklenmi\u015f bir kural\u0131 kald\u0131rmak i\u00e7in iki ana y\u00f6ntem vard\u0131r: kural\u0131n kendisini yazarak veya numaras\u0131n\u0131 kullanarak.<\/p>\n<h4>Kural\u0131n Kendisini Yazarak Silme<\/h4>\n<p>Bir kural\u0131 silmek i\u00e7in, o kural\u0131 eklerken kulland\u0131\u011f\u0131n\u0131z komutun ba\u015f\u0131na `delete` kelimesini ekleyebilirsiniz. \u00d6rne\u011fin, HTTP trafi\u011fine izin veren kural\u0131 silmek i\u00e7in:<\/p>\n<p><code>sudo ufw delete allow http<\/code><\/p>\n<p>Bu y\u00f6ntem, basit kurallar i\u00e7in kullan\u0131\u015fl\u0131d\u0131r ancak karma\u015f\u0131k kurallarda yaz\u0131m hatas\u0131 yapma olas\u0131l\u0131\u011f\u0131 y\u00fcksektir.<\/p>\n<h4>Kural Numaras\u0131 Kullanarak Silme<\/h4>\n<p>Daha g\u00fcvenilir ve pratik olan y\u00f6ntem, kural numaras\u0131n\u0131 kullanmakt\u0131r. \u00d6nce `sudo ufw status numbered` ile kurallar\u0131 listeleyin, ard\u0131ndan silmek istedi\u011finiz kural\u0131n numaras\u0131n\u0131 belirleyin. \u00d6rne\u011fin, listede 3. s\u0131rada yer alan kural\u0131 silmek i\u00e7in:<\/p>\n<p><code>sudo ufw delete 3<\/code><\/p>\n<p>UFW, i\u015flemi onaylaman\u0131z\u0131 isteyecektir. &#8220;y&#8221; ile onaylad\u0131ktan sonra kural silinir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Tum-Kurallari-Sifirlama-Reset\"><\/span>T\u00fcm Kurallar\u0131 S\u0131f\u0131rlama (Reset)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>E\u011fer g\u00fcvenlik duvar\u0131 yap\u0131land\u0131rman\u0131z\u0131 tamamen ba\u015fa almak ve eklenmi\u015f t\u00fcm kurallar\u0131 silerek UFW&#8217;yi ba\u015flang\u0131\u00e7 durumuna getirmek isterseniz, `reset` komutunu kullanabilirsiniz. Bu komut, t\u00fcm kurallar\u0131 siler, UFW&#8217;yi devre d\u0131\u015f\u0131 b\u0131rak\u0131r ve varsay\u0131lan politikalar\u0131 ilk haline d\u00f6nd\u00fcr\u00fcr.<\/p>\n<p><code>sudo ufw reset<\/code><\/p>\n<p>Bu i\u015flem geri al\u0131namaz oldu\u011fundan dikkatli kullan\u0131lmal\u0131d\u0131r. \u00d6zellikle bir <a href=\"https:\/\/www.ihs.com.tr\/blog\/sunucu-maliyetlerini-kontrol-altinda-tutmak-icin-7-strateji\/\" target=\"_blank\">sunucu maliyetlerini<\/a> d\u00fc\u015f\u00fcrmek i\u00e7in gereksiz servisleri kapat\u0131p kurallar\u0131 temizlemek istedi\u011finizde kullan\u0131\u015fl\u0131 olabilir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Baglantilari-Reddetme-ve-Sinirlama-Deny-ve-Limit\"><\/span>Ba\u011flant\u0131lar\u0131 Reddetme ve S\u0131n\u0131rlama (Deny ve Limit)<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>G\u00fcvenlik duvar\u0131n\u0131n temel g\u00f6revi istenmeyen trafi\u011fi engellemektir. UFW, `allow` (izin ver) kurallar\u0131n\u0131n yan\u0131 s\u0131ra, belirli ba\u011flant\u0131lar\u0131 a\u00e7\u0131k\u00e7a reddetmek (`deny`) ve kaba kuvvet sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma sa\u011flamak i\u00e7in ba\u011flant\u0131lar\u0131 s\u0131n\u0131rlamak (`limit`) i\u00e7in de g\u00fc\u00e7l\u00fc mekanizmalar sunar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Belirli-Baglantilari-Acikca-Reddetme-Deny\"><\/span>Belirli Ba\u011flant\u0131lar\u0131 A\u00e7\u0131k\u00e7a Reddetme (Deny)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Varsay\u0131lan &#8220;deny incoming&#8221; politikan\u0131z zaten \u00e7o\u011fu istenmeyen trafi\u011fi engeller. Ancak bazen, belirli bir IP adresinden veya alt a\u011fdan gelen t\u00fcm trafi\u011fi, di\u011fer kurallar ne olursa olsun a\u00e7\u0131k\u00e7a engellemek isteyebilirsiniz. \u00d6rne\u011fin, k\u00f6t\u00fc niyetli faaliyet tespit etti\u011finiz `203.0.113.10` IP adresini tamamen engellemek i\u00e7in:<\/p>\n<p><code>sudo ufw deny from 203.0.113.10<\/code><\/p>\n<p>Bu `deny` kural\u0131, ayn\u0131 IP i\u00e7in daha \u00f6nce eklenmi\u015f olabilecek `allow` kurallar\u0131ndan \u00f6nce de\u011ferlendirilir ve belirtilen kaynaktan gelen t\u00fcm paketleri d\u00fc\u015f\u00fcr\u00fcr.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kaba-Kuvvet-Brute-Force-Saldirilarina-Karsi-Baglanti-Sinirlama-Limit\"><\/span>Kaba Kuvvet (Brute-Force) Sald\u0131r\u0131lar\u0131na Kar\u015f\u0131 Ba\u011flant\u0131 S\u0131n\u0131rlama (Limit)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Kaba kuvvet (brute-force) sald\u0131r\u0131lar\u0131, bir servise (\u00f6zellikle SSH&#8217;a) \u00e7ok k\u0131sa s\u00fcrede \u00e7ok say\u0131da parola denemesi yaparak eri\u015fim sa\u011flamay\u0131 hedefler. UFW&#8217;nin `limit` \u00f6zelli\u011fi bu t\u00fcr sald\u0131r\u0131lara kar\u015f\u0131 etkili bir koruma sa\u011flar. Bir porta `limit` kural\u0131 uygulad\u0131\u011f\u0131n\u0131zda, UFW son 30 saniye i\u00e7inde ayn\u0131 IP adresinden 6 veya daha fazla ba\u011flant\u0131 giri\u015fimi olursa bu IP&#8217;yi ge\u00e7ici olarak engeller. SSH portu i\u00e7in bu \u00f6zelli\u011fi etkinle\u015ftirmek olduk\u00e7a yayg\u0131nd\u0131r:<\/p>\n<p><code>sudo ufw limit ssh<\/code><\/p>\n<p>Bu basit komut, SSH sunucunuzun g\u00fcvenli\u011fini \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131r\u0131r. Bu \u00f6zellik, \u00f6zellikle <a href=\"https:\/\/www.ihs.com.tr\/blog\/wordpress-te-yorum-comment-spam-ini-engellemenin-en-iyi-yollari\/\" target=\"_blank\">WordPress yorum spam&#8217;i<\/a> gibi otomatik sald\u0131r\u0131lar\u0131n kaynakland\u0131\u011f\u0131 IP&#8217;leri engellemek i\u00e7in de dolayl\u0131 bir fayda sa\u011flayabilir.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>Komut<\/th>\n<th>A\u00e7\u0131klama<\/th>\n<th>Kullan\u0131m Senaryosu<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>allow<\/strong><\/td>\n<td>Belirtilen port\/servis\/IP&#8217;den gelen trafi\u011fe izin verir.<\/td>\n<td>Web sunucusu i\u00e7in HTTP\/HTTPS trafi\u011fine veya belirli bir IP&#8217;den SSH eri\u015fimine izin vermek.<\/td>\n<\/tr>\n<tr>\n<td><strong>deny<\/strong><\/td>\n<td>Belirtilen port\/servis\/IP&#8217;den gelen trafi\u011fi a\u00e7\u0131k\u00e7a reddeder.<\/td>\n<td>K\u00f6t\u00fc niyetli oldu\u011fu bilinen bir IP adresini kal\u0131c\u0131 olarak engellemek.<\/td>\n<\/tr>\n<tr>\n<td><strong>limit<\/strong><\/td>\n<td>Belirtilen servise y\u00f6nelik ba\u011flant\u0131 denemelerini s\u0131n\u0131rlar.<\/td>\n<td>SSH portuna y\u00f6nelik kaba kuvvet (brute-force) sald\u0131r\u0131lar\u0131n\u0131 \u00f6nlemek.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"UFW-Gunluk-Kayitlari-Logging-ve-Izleme\"><\/span>UFW G\u00fcnl\u00fck Kay\u0131tlar\u0131 (Logging) ve \u0130zleme<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>G\u00fcvenlik duvar\u0131n\u0131z\u0131n ne yapt\u0131\u011f\u0131n\u0131, hangi ba\u011flant\u0131lar\u0131 engelledi\u011fini veya hangilerine izin verdi\u011fini anlamak, g\u00fcvenlik analizi ve sorun giderme i\u00e7in hayati \u00f6neme sahiptir. UFW, t\u00fcm bu aktiviteleri kaydeden esnek bir g\u00fcnl\u00fck kayd\u0131 (logging) sistemine sahiptir. Bu g\u00fcnl\u00fckler, potansiyel g\u00fcvenlik tehditlerini tespit etmenize ve kural yap\u0131land\u0131rman\u0131z\u0131 optimize etmenize yard\u0131mc\u0131 olur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Gunluk-Kaydini-Etkinlestirme-ve-Kapatma\"><\/span>G\u00fcnl\u00fck Kayd\u0131n\u0131 Etkinle\u015ftirme ve Kapatma<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>UFW&#8217;de g\u00fcnl\u00fck kayd\u0131 varsay\u0131lan olarak kapal\u0131 olabilir. Etkinle\u015ftirmek olduk\u00e7a basittir. A\u015fa\u011f\u0131daki komut, varsay\u0131lan seviyede g\u00fcnl\u00fck kayd\u0131n\u0131 ba\u015flat\u0131r:<\/p>\n<p><code>sudo ufw logging on<\/code><\/p>\n<p>G\u00fcnl\u00fck kayd\u0131n\u0131 art\u0131k istemiyorsan\u0131z veya sunucu disk alan\u0131ndan tasarruf etmek isterseniz, ayn\u0131 kolayl\u0131kla kapatabilirsiniz:<\/p>\n<p><code>sudo ufw logging off<\/code><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Gunluk-Seviyelerini-Ayarlama\"><\/span>G\u00fcnl\u00fck Seviyelerini Ayarlama<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>UFW, farkl\u0131 detay seviyelerinde g\u00fcnl\u00fck tutman\u0131za olanak tan\u0131r. Bu seviyeler `low`, `medium`, `high`, `full` ve `off` olarak s\u0131ralan\u0131r.<\/p>\n<ul>\n<li><b>low:<\/b> Varsay\u0131lan seviyedir. Engellenen veya izin verilen (kurallarla e\u015fle\u015fen) t\u00fcm paketleri kaydeder.<\/li>\n<li><b>medium:<\/b> `low` seviyesindeki her \u015feyi ve ge\u00e7ersiz paketler gibi ek bilgileri kaydeder.<\/li>\n<li><b>high:<\/b> `medium` seviyesindeki her \u015feyi kaydeder ancak h\u0131z s\u0131n\u0131rlamas\u0131 olmaks\u0131z\u0131n daha ayr\u0131nt\u0131l\u0131 kay\u0131t tutar.<\/li>\n<li><b>full:<\/b> En detayl\u0131 g\u00fcnl\u00fck seviyesidir.<\/li>\n<\/ul>\n<p>\u00d6rne\u011fin, g\u00fcnl\u00fck seviyesini &#8216;medium&#8217; olarak ayarlamak i\u00e7in:<\/p>\n<p><code>sudo ufw logging medium<\/code><\/p>\n<p>Genellikle `low` seviyesi, \u00e7o\u011fu kullan\u0131c\u0131 i\u00e7in yeterli bilgiyi sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"UFW-Gunluk-Dosyalarini-Okuma-ve-Anlama\"><\/span>UFW G\u00fcnl\u00fck Dosyalar\u0131n\u0131 Okuma ve Anlama<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>UFW g\u00fcnl\u00fckleri genellikle `\/var\/log\/ufw.log` dosyas\u0131na kaydedilir. Bu dosyay\u0131 `less`, `more` veya `tail` gibi standart Linux komutlar\u0131yla okuyabilirsiniz. \u00d6rne\u011fin, g\u00fcnl\u00fckleri ger\u00e7ek zamanl\u0131 olarak izlemek i\u00e7in:<\/p>\n<p><code>sudo tail -f \/var\/log\/ufw.log<\/code><\/p>\n<p>Bir UFW g\u00fcnl\u00fck sat\u0131r\u0131 tipik olarak \u015fu bilgileri i\u00e7erir: Tarih, saat, sunucu ad\u0131, UFW eylemi ([UFW BLOCK]), kaynak IP (SRC), hedef IP (DST), kaynak port (SPT), hedef port (DPT) ve protokol (PROTO). Bu bilgiler, hangi IP&#8217;nin hangi porta eri\u015fmeye \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 ve g\u00fcvenlik duvar\u0131n\u0131z\u0131n bu iste\u011fi nas\u0131l i\u015fledi\u011fini anlaman\u0131za yard\u0131mc\u0131 olur. \u00d6zellikle bir <a href=\"https:\/\/www.ihs.com.tr\/ssl\/\" target=\"_blank\">SSL sertifikas\u0131<\/a> ile korunan servise eri\u015fim sorunlar\u0131n\u0131 te\u015fhis ederken bu loglar \u00e7ok de\u011ferli olabilir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Pratik-Bir-Senaryo-Web-Sunucusu-Yapilandirmasi\"><\/span>Pratik Bir Senaryo: Web Sunucusu Yap\u0131land\u0131rmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Teorik bilgileri prati\u011fe d\u00f6kmek, UFW&#8217;nin ne kadar g\u00fc\u00e7l\u00fc ve basit oldu\u011funu anlaman\u0131n en iyi yoludur. Bu senaryoda, standart bir web sunucusu i\u00e7in temel g\u00fcvenlik duvar\u0131 yap\u0131land\u0131rmas\u0131n\u0131 ad\u0131m ad\u0131m ger\u00e7ekle\u015ftirece\u011fiz. Amac\u0131m\u0131z, sunucuya yaln\u0131zca SSH (y\u00f6netim i\u00e7in), HTTP ve HTTPS (web trafi\u011fi i\u00e7in) \u00fczerinden eri\u015fime izin vermek ve di\u011fer t\u00fcm portlar\u0131 d\u0131\u015f d\u00fcnyaya kapatmakt\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"SSH-HTTP-ve-HTTPS-Trafigine-Izin-Verme\"><\/span>SSH, HTTP ve HTTPS Trafi\u011fine \u0130zin Verme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130lk olarak, sunucuya uzaktan eri\u015fimimizi kaybetmemek i\u00e7in SSH ba\u011flant\u0131lar\u0131na izin vererek ba\u015flamal\u0131y\u0131z. Ard\u0131ndan web trafi\u011fi i\u00e7in gerekli olan HTTP ve HTTPS portlar\u0131n\u0131 a\u00e7aca\u011f\u0131z.<\/p>\n<ol>\n<li><b>SSH \u0130zni:<\/b> Sunucuyla ba\u011flant\u0131m\u0131z\u0131n kesilmemesi i\u00e7in ilk kural\u0131m\u0131z her zaman SSH olmal\u0131d\u0131r.\n<p><code>sudo ufw allow ssh<\/code><\/p>\n<\/li>\n<li><b>HTTP \u0130zni:<\/b> Web sitenizin standart, \u015fifrelenmemi\u015f trafi\u011fini kabul etmek i\u00e7in 80 numaral\u0131 porta izin verin.\n<p><code>sudo ufw allow http<\/code><\/p>\n<\/li>\n<li><b>HTTPS \u0130zni:<\/b> G\u00fcvenli, <a href=\"https:\/\/www.ihs.com.tr\/blog\/man-in-the-middle-ortadaki-adam-saldirilarini-ssl-nasil-engeller\/\" target=\"_blank\">SSL<\/a> ile \u015fifrelenmi\u015f web trafi\u011fi i\u00e7in 443 numaral\u0131 porta izin verin.\n<p><code>sudo ufw allow https<\/code><\/p>\n<\/li>\n<\/ol>\n<h3><span class=\"ez-toc-section\" id=\"Gereksiz-Portlarin-Kapali-Oldugundan-Emin-Olma\"><\/span>Gereksiz Portlar\u0131n Kapal\u0131 Oldu\u011fundan Emin Olma<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bu senaryo i\u00e7in varsay\u0131lan politikalar\u0131m\u0131z\u0131 &#8220;gelenleri reddet&#8221; ve &#8220;gidenlere izin ver&#8221; olarak ayarlayaca\u011f\u0131z. Bu, yukar\u0131da a\u00e7\u0131k\u00e7a izin verdi\u011fimiz \u00fc\u00e7 servis (SSH, HTTP, HTTPS) d\u0131\u015f\u0131nda hi\u00e7bir gelen ba\u011flant\u0131 iste\u011finin kabul edilmemesini garanti eder.<\/p>\n<p><code>sudo ufw default deny incoming<\/code><\/p>\n<p><code>sudo ufw default allow outgoing<\/code><\/p>\n<p>Bu ayarlar, veritaban\u0131, e-posta veya di\u011fer arka plan servislerinizin portlar\u0131n\u0131n internete a\u00e7\u0131k kalmas\u0131n\u0131 engeller. Benzer bir yap\u0131land\u0131rma, <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/wordpress-hosting.html\" target=\"_blank\">WordPress hosting<\/a> hizmetlerinde g\u00fcvenli\u011fi sa\u011flamak i\u00e7in de temel bir ad\u0131md\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yapilandirmayi-Etkinlestirme-ve-Test-Etme\"><\/span>Yap\u0131land\u0131rmay\u0131 Etkinle\u015ftirme ve Test Etme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Gerekli t\u00fcm kurallar\u0131 ekledi\u011fimize ve varsay\u0131lan politikalar\u0131 ayarlad\u0131\u011f\u0131m\u0131za g\u00f6re, art\u0131k UFW&#8217;yi g\u00fcvenle etkinle\u015ftirebiliriz.<\/p>\n<p><code>sudo ufw enable<\/code><\/p>\n<p>Etkinle\u015ftirdikten sonra, son durumu kontrol edelim:<\/p>\n<p><code>sudo ufw status<\/code><\/p>\n<p>\u00c7\u0131kt\u0131, SSH (22\/tcp), HTTP (80\/tcp) ve HTTPS (443\/tcp) i\u00e7in &#8220;ALLOW&#8221; eylemini g\u00f6stermelidir. Art\u0131k web sunucunuz temel bir g\u00fcvenlik duvar\u0131 korumas\u0131 alt\u0131ndad\u0131r. Web sitenize bir taray\u0131c\u0131dan eri\u015ferek ve SSH ba\u011flant\u0131s\u0131 kurarak kurallar\u0131n do\u011fru \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 test edebilirsiniz.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Sunucu-Guvenliginiz-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\"><\/span>Sunucu G\u00fcvenli\u011finiz \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>UFW gibi ara\u00e7larla sunucu g\u00fcvenli\u011fini sa\u011flamak \u00f6nemli olsa da, kapsaml\u0131 ve profesyonel bir koruma, altyap\u0131 d\u00fczeyinde ba\u015flar. \u0130HS Telekom, T\u00fcrkiye&#8217;nin en iyi <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/cpanel-hosting.html\" target=\"_blank\">cPanel hosting<\/a> ve sunucu sa\u011flay\u0131c\u0131lar\u0131ndan biri olarak, m\u00fc\u015fterilerine yaln\u0131zca y\u00fcksek performansl\u0131 de\u011fil, ayn\u0131 zamanda son derece g\u00fcvenli bir bar\u0131nd\u0131rma deneyimi sunar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yonetilen-Guvenlik-Duvari-Cozumleri\"><\/span>Y\u00f6netilen G\u00fcvenlik Duvar\u0131 \u00c7\u00f6z\u00fcmleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sunucu y\u00f6netimi ve g\u00fcvenlik duvar\u0131 yap\u0131land\u0131rmas\u0131yla u\u011fra\u015fmak istemeyenler i\u00e7in \u0130HS Telekom, y\u00f6netilen g\u00fcvenlik duvar\u0131 hizmetleri sunar. Uzman ekipler, sunucunuz i\u00e7in en uygun g\u00fcvenlik politikalar\u0131n\u0131 olu\u015fturur, uygular ve s\u00fcrekli olarak izler. Bu sayede siz i\u015finize odaklan\u0131rken, sunucunuz profesyoneller taraf\u0131ndan korunur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"DDoS-Korumasi-ve-Gelismis-Tehdit-Onleme-Sistemleri\"><\/span>DDoS Korumas\u0131 ve Geli\u015fmi\u015f Tehdit \u00d6nleme Sistemleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>UFW, temel sald\u0131r\u0131lara kar\u015f\u0131 koruma sa\u011flarken, b\u00fcy\u00fck \u00f6l\u00e7ekli Da\u011f\u0131t\u0131lm\u0131\u015f Hizmet Engelleme (DDoS) sald\u0131r\u0131lar\u0131 \u00f6zel donan\u0131m ve altyap\u0131 gerektirir. \u0130HS Telekom, a\u011f altyap\u0131s\u0131nda bulunan geli\u015fmi\u015f DDoS koruma sistemleri ile sunucular\u0131n\u0131z\u0131 hizmet kesintisine neden olabilecek en karma\u015f\u0131k sald\u0131r\u0131lara kar\u015f\u0131 bile korur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"724-Uzman-Guvenlik-Destegi\"><\/span>7\/24 Uzman G\u00fcvenlik Deste\u011fi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>G\u00fcvenlik tehditleri asla uyumaz. \u0130HS Telekom, 7\/24 g\u00f6rev ba\u015f\u0131nda olan uzman teknik destek ekibiyle, herhangi bir g\u00fcvenlik endi\u015fenizde veya acil durumda an\u0131nda m\u00fcdahale sa\u011flar. Kar\u015f\u0131la\u015ft\u0131\u011f\u0131n\u0131z bir sorunda veya \u015f\u00fcpheli bir aktivitede size yol g\u00f6sterecek bir uzmana her zaman ula\u015fabilirsiniz.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yuksek-Performansli-ve-Guvenli-Veri-Merkezi-Altyapisi\"><\/span>Y\u00fcksek Performansl\u0131 ve G\u00fcvenli Veri Merkezi Altyap\u0131s\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sunucu g\u00fcvenli\u011fi sadece yaz\u0131l\u0131msal de\u011fil, ayn\u0131 zamanda fizikseldir. \u0130HS Telekom&#8217;un modern veri merkezleri, en son teknoloji fiziksel g\u00fcvenlik \u00f6nlemleri, yedekli g\u00fc\u00e7 ve iklimlendirme sistemleri ile donat\u0131lm\u0131\u015ft\u0131r. Bu sayede sunucular\u0131n\u0131z hem siber hem de fiziksel tehditlere kar\u015f\u0131 g\u00fcvende olur. G\u00fcvenilir bir <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/\" target=\"_blank\">hosting<\/a> altyap\u0131s\u0131, t\u00fcm g\u00fcvenlik stratejisinin temelidir.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Dijital d\u00fcnyada sunucu g\u00fcvenli\u011fi, veri b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc ve hizmet s\u00fcreklili\u011fini sa\u011flaman\u0131n temel ta\u015f\u0131d\u0131r. Sunucular, internet \u00fczerinden s\u00fcrekli olarak \u00e7e\u015fitli ba\u011flant\u0131 isteklerine maruz kal\u0131r&hellip;<\/p>\n","protected":false},"author":3,"featured_media":16412,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[414],"tags":[],"class_list":["post-16411","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sunucu"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16411","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=16411"}],"version-history":[{"count":1,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16411\/revisions"}],"predecessor-version":[{"id":16413,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16411\/revisions\/16413"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/16412"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=16411"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=16411"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=16411"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}