{"id":14855,"date":"2023-12-08T09:00:03","date_gmt":"2023-12-08T06:00:03","guid":{"rendered":"https:\/\/blog.sh.com.tr\/?p=14855"},"modified":"2023-12-08T11:15:55","modified_gmt":"2023-12-08T08:15:55","slug":"linux-hostingde-guvenlik-duvari-firewall-kurulumu","status":"publish","type":"post","link":"https:\/\/sh.com.tr\/blog\/linux-hostingde-guvenlik-duvari-firewall-kurulumu\/","title":{"rendered":"Linux Hostingde G\u00fcvenlik Duvar\u0131 (Firewall) Kurulumu"},"content":{"rendered":"<p><strong>Linux Hostingde G\u00fcvenlik Duvar\u0131 (Firewall) Kurulumu<\/strong>, web sunucular\u0131n\u0131z\u0131n g\u00fcvenli\u011fini sa\u011flama a\u00e7\u0131s\u0131ndan kritik \u00f6neme sahiptir. Bir <strong>Linux<\/strong> tabanl\u0131 sunucuda <strong>firewall kurulumu<\/strong>, d\u0131\u015f tehditlere kar\u015f\u0131 koruma sa\u011flar ve sistem kaynaklar\u0131n\u0131z\u0131 etkin bir \u015fekilde koruman\u0131za yard\u0131mc\u0131 olur. Bu s\u00fcre\u00e7, \u00e7e\u015fitli <strong>firewall ara\u00e7lar\u0131<\/strong> kullan\u0131larak ve belirli <strong>konfig\u00fcrasyon ad\u0131mlar\u0131<\/strong> izlenerek ger\u00e7ekle\u015ftirilir.<\/p>\n<p><strong>1. Firewall Yaz\u0131l\u0131m Se\u00e7imi<\/strong>: Linux sunucularda pop\u00fcler firewall \u00e7\u00f6z\u00fcmleri aras\u0131nda <strong>iptables<\/strong>, <strong>firewalld<\/strong>, ve <strong>ufw (Uncomplicated Firewall)<\/strong> bulunur. Her birinin kendine has \u00f6zellikleri ve konfig\u00fcrasyon y\u00f6ntemleri vard\u0131r.<\/p>\n<p><strong>2. iptables Kullan\u0131m\u0131<\/strong>: Linux&#8217;un en eski ve en esnek firewall \u00e7\u00f6z\u00fcm\u00fcd\u00fcr. Kompleks kurallar olu\u015fturman\u0131za olanak tan\u0131r, ancak kullan\u0131m\u0131 di\u011ferlerine g\u00f6re daha karma\u015f\u0131kt\u0131r. <strong>iptables<\/strong>, paket filtreleme kurallar\u0131n\u0131 do\u011frudan y\u00f6netir ve a\u011f trafi\u011finin detayl\u0131 kontrol\u00fcn\u00fc sa\u011flar.<\/p>\n<p><strong>3. firewalld Kurulumu ve Y\u00f6netimi<\/strong>: <strong>firewalld<\/strong>, \u00f6zellikle <strong>Red Hat<\/strong> ve <strong>Fedora<\/strong> gibi da\u011f\u0131t\u0131mlarda tercih edilen bir ara\u00e7t\u0131r. <strong>Zoneler<\/strong> ve <strong>hizmetler<\/strong> \u00fczerinden kurallar\u0131 y\u00f6netmek i\u00e7in daha kullan\u0131c\u0131 dostu bir arabirim sunar.<\/p>\n<p><strong>4. ufw Kurulumu ve Kullan\u0131m\u0131<\/strong>: ufw, Ubuntu ve di\u011fer Debian tabanl\u0131 da\u011f\u0131t\u0131mlar i\u00e7in tasarlanm\u0131\u015f bir firewall arac\u0131d\u0131r. Basit ve anla\u015f\u0131l\u0131r komut sat\u0131r\u0131 aray\u00fcz\u00fc sayesinde, firewall kurallar\u0131n\u0131 kolayca y\u00f6netmenizi sa\u011flar.<\/p>\n<h4><strong>Firewall Kurulum Ad\u0131mlar\u0131<\/strong><\/h4>\n<p><strong>1. Paket Y\u00f6neticisi ile Firewall Yaz\u0131l\u0131m\u0131n\u0131 Y\u00fckleme<\/strong>: \u0130lgili paket y\u00f6neticisi (apt, yum, dnf vb.) kullan\u0131larak, se\u00e7ilen firewall yaz\u0131l\u0131m\u0131 y\u00fcklenir.<\/p>\n<p><strong>2. Ba\u015flang\u0131\u00e7 Konfig\u00fcrasyonu<\/strong>: Firewall yaz\u0131l\u0131m\u0131n\u0131n ba\u015flang\u0131\u00e7 konfig\u00fcrasyonu yap\u0131l\u0131r. Bu, genel a\u011f ayarlar\u0131n\u0131 ve varsay\u0131lan politikalar\u0131 i\u00e7erir.<\/p>\n<p><strong>3. Kurallar\u0131n Tan\u0131mlanmas\u0131<\/strong>: Sunucunuzun ihtiya\u00e7lar\u0131na g\u00f6re <strong>giri\u015f (incoming)<\/strong> ve <strong>\u00e7\u0131k\u0131\u015f (outgoing)<\/strong> kurallar\u0131 tan\u0131mlan\u0131r. Bu kurallar, belirli portlar\u0131, IP adreslerini veya protokolleri i\u00e7erebilir.<\/p>\n<p><strong>4. Zonelar ve Hizmetler<\/strong>: firewalld kullan\u0131yorsan\u0131z, farkl\u0131 g\u00fcvenlik seviyeleri i\u00e7in <strong>zonelar<\/strong> tan\u0131mlayabilir ve belirli <strong>hizmetler<\/strong> i\u00e7in eri\u015fim izinleri verebilirsiniz.<\/p>\n<p><strong>5. Test Etme ve \u0130nce Ayar<\/strong>: Kurallar tan\u0131mland\u0131ktan sonra, sunucunun d\u00fczg\u00fcn \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olmak i\u00e7in testler yap\u0131l\u0131r. A\u011f trafi\u011fini izleyerek ve g\u00fcnl\u00fckleri kontrol ederek, kurallar\u0131n beklenen \u015fekilde \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frulay\u0131n.<\/p>\n<h4><strong>Geli\u015fmi\u015f Konfig\u00fcrasyonlar ve G\u00fcvenlik \u00d6nerileri<\/strong><\/h4>\n<ul>\n<li><strong>Port G\u00fcvenli\u011fi<\/strong>: Yaln\u0131zca gerekli portlar\u0131n a\u00e7\u0131k oldu\u011fundan emin olun. \u00d6zellikle <strong>SSH (22)<\/strong>, <strong>HTTP (80)<\/strong> ve <strong>HTTPS (443)<\/strong> gibi yayg\u0131n portlar i\u00e7in g\u00fc\u00e7l\u00fc g\u00fcvenlik politikalar\u0131 uygulay\u0131n.<\/li>\n<li><strong>DDoS Koruma<\/strong>: A\u011f trafi\u011findeki anormal art\u0131\u015flar\u0131 izleyerek DDoS sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma sa\u011flay\u0131n.<\/li>\n<li><strong>G\u00fcnl\u00fck Kayd\u0131<\/strong>: G\u00fcvenlik duvar\u0131 etkinliklerini kaydetmek, olas\u0131 g\u00fcvenlik ihlallerini tespit etmede yard\u0131mc\u0131 olur.<\/li>\n<li><strong>D\u00fczenli G\u00fcncellemeler<\/strong>: Yaz\u0131l\u0131m\u0131n\u0131z\u0131 ve kurallar\u0131n\u0131z\u0131 d\u00fczenli olarak g\u00fcncelleyerek g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 minimize edin.<\/li>\n<\/ul>\n<h5><strong>Sonu\u00e7<\/strong><\/h5>\n<p>Linux hosting ortam\u0131nda etkin bir <strong>G\u00fcvenlik Duvar\u0131 (Firewall) Kurulumu<\/strong>, web sunucunuzu \u00e7e\u015fitli siber tehditlere kar\u015f\u0131 korur. iptables, firewalld ve ufw gibi ara\u00e7lar, ihtiya\u00e7lar\u0131n\u0131za g\u00f6re esnek \u00e7\u00f6z\u00fcmler sunar. Do\u011fru kurulum ve y\u00f6netim, a\u011f g\u00fcvenli\u011finizi art\u0131r\u0131r ve sunucunuzun uzun vadeli sa\u011fl\u0131\u011f\u0131n\u0131 korur.<\/p>\n<h4><strong>Linux Hostingde Hotlink Korumas\u0131<\/strong><\/h4>\n<p><strong>Hotlink Korumas\u0131<\/strong>, web sitelerinin kaynaklar\u0131n\u0131 korumak i\u00e7in hayati \u00f6neme sahiptir. \u00d6zellikle <strong>Linux Hosting<\/strong> ortamlar\u0131nda, bu koruma, sitenizin bant geni\u015fli\u011finin k\u00f6t\u00fcye kullan\u0131lmas\u0131n\u0131 \u00f6nler ve i\u00e7eri\u011finizin izinsiz kullan\u0131lmas\u0131n\u0131 engeller. Hotlink, bir ba\u015fka site taraf\u0131ndan do\u011frudan dosya linkinin kullan\u0131lmas\u0131 anlam\u0131na gelir ve bu genellikle resimler, videolar ve di\u011fer medya dosyalar\u0131 i\u00e7in yap\u0131l\u0131r.<\/p>\n<h4><strong>1. Hotlink Nedir?<\/strong><\/h4>\n<p>Hotlink, bir sitenin i\u00e7eri\u011finin ba\u015fka bir web sitesi taraf\u0131ndan direkt olarak linklenmesidir. Bu durum, \u00f6zellikle g\u00f6rseller i\u00e7in yayg\u0131nd\u0131r ve kaynak sitenin bant geni\u015fli\u011fini t\u00fcketir.<\/p>\n<h4><strong>2. Linux Hosting Ortam\u0131nda Hotlink Korumas\u0131<\/strong><\/h4>\n<p>Linux sunucular, <strong>Apache<\/strong> veya <strong>Nginx<\/strong> gibi web sunucu yaz\u0131l\u0131mlar\u0131 \u00fczerinden hotlink korumas\u0131 sa\u011flama kapasitesine sahiptir. Bu koruma, genellikle <strong>.htaccess<\/strong> dosyas\u0131 veya sunucu yap\u0131land\u0131rma dosyalar\u0131 \u00fczerinden yap\u0131l\u0131r.<\/p>\n<h4><strong>3. .htaccess ile Hotlink Korumas\u0131<\/strong><\/h4>\n<p>Apache sunucular\u0131nda, .htaccess dosyas\u0131 arac\u0131l\u0131\u011f\u0131yla basit kurallar tan\u0131mlayarak hotlink korumas\u0131 sa\u011flanabilir. Bu dosya, sitenizin k\u00f6k dizininde yer al\u0131r ve <strong>RewriteEngine<\/strong> kurallar\u0131 kullan\u0131larak yap\u0131land\u0131r\u0131l\u0131r.<\/p>\n<h4><strong>4. Nginx Sunucular\u0131nda Hotlink Korumas\u0131<\/strong><\/h4>\n<p>Nginx, farkl\u0131 bir yap\u0131land\u0131rma sistemi kullan\u0131r. Hotlink korumas\u0131, Nginx sunucu bloklar\u0131 i\u00e7inde <strong>location<\/strong> direktifleri ile yap\u0131l\u0131r. Bu yap\u0131land\u0131rma, isteklerin kayna\u011f\u0131n\u0131 kontrol ederek yaln\u0131zca belirli domainlerden eri\u015fime izin verir.<\/p>\n<h4><strong>5. Hotlink Korumas\u0131n\u0131n Avantajlar\u0131<\/strong><\/h4>\n<p><strong>Bant Geni\u015fli\u011fi Tasarrufu<\/strong>: \u0130\u00e7eri\u011finizin ba\u015fka siteler taraf\u0131ndan kullan\u0131lmas\u0131n\u0131 \u00f6nleyerek bant geni\u015fli\u011fi tasarrufu sa\u011flar.<\/p>\n<p><strong>\u0130\u00e7erik H\u0131rs\u0131zl\u0131\u011f\u0131na Kar\u015f\u0131 Koruma<\/strong>: \u00d6zg\u00fcn i\u00e7eri\u011finizin ba\u015fkalar\u0131 taraf\u0131ndan izinsiz kullan\u0131lmas\u0131n\u0131 engeller.<\/p>\n<p><strong>Sunucu Performans\u0131n\u0131n Korunmas\u0131<\/strong>: Bant geni\u015fli\u011fi t\u00fcketiminin azalmas\u0131 sunucu performans\u0131n\u0131 olumlu etkiler.<\/p>\n<h4><strong>6.<\/strong> <strong>.htaccess ile Hotlink Korumas\u0131 Yap\u0131land\u0131rmas\u0131<\/strong><\/h4>\n<p><strong>RewriteEngine Aktivasyonu<\/strong>: \u0130lk olarak, RewriteEngine\u2019i aktif hale getirin.<\/p>\n<p><strong>Referer Kontrol\u00fc<\/strong>: HTTP referer ba\u015fl\u0131\u011f\u0131n\u0131 kontrol ederek, sadece belirli domainlerin i\u00e7eri\u011finize eri\u015fmesine izin verin.<\/p>\n<p><strong>Yasaklanan \u0130steklere Y\u00f6nlendirme<\/strong>: Yasaklanan istekleri bir hata sayfas\u0131na veya alternatif bir i\u00e7eri\u011fe y\u00f6nlendirin.<\/p>\n<h4><strong>7. Nginx Sunucu Bloklar\u0131 ile Hotlink Korumas\u0131<\/strong><\/h4>\n<p><strong>Konum Bloklar\u0131<\/strong>: Belirli dosya t\u00fcrleri i\u00e7in konum bloklar\u0131 olu\u015fturun.<\/p>\n<p><strong>Valid_referers<\/strong>: \u0130zin verilen referer&#8217;lar\u0131 tan\u0131mlay\u0131n.<\/p>\n<p><strong>Eri\u015fim K\u0131s\u0131tlamalar\u0131<\/strong>: Ge\u00e7ersiz refererlardan gelen istekleri engelleyin.<\/p>\n<h4><strong>8. Geli\u015fmi\u015f Hotlink Korumas\u0131 Teknikleri<\/strong><\/h4>\n<p><strong>Dinamik \u0130\u00e7erik Y\u00f6nlendirmesi<\/strong>: Kullan\u0131c\u0131lar\u0131n i\u00e7eri\u011finize do\u011frudan eri\u015fimini \u00f6nlemek i\u00e7in dinamik URL yap\u0131lar\u0131 kullan\u0131n.<\/p>\n<p><strong>CDN Kullan\u0131m\u0131<\/strong>: \u0130\u00e7erik Da\u011f\u0131t\u0131m A\u011f\u0131 (CDN), i\u00e7eri\u011finizin korunmas\u0131na yard\u0131mc\u0131 olur ve bant geni\u015fli\u011fi t\u00fcketimini azalt\u0131r.<\/p>\n<p><strong>G\u00fcvenlik Eklentileri ve Ara\u00e7lar\u0131<\/strong>: CMS platformlar\u0131 i\u00e7in \u00f6zel g\u00fcvenlik eklentileri, hotlink korumas\u0131 sa\u011flamada etkili olabilir.<\/p>\n<h4><strong>9. Hotlink Korumas\u0131n\u0131n Y\u00f6netimi ve \u0130zlenmesi<\/strong><\/h4>\n<p><strong>G\u00fcnl\u00fck Kay\u0131tlar\u0131n\u0131 \u0130nceleme<\/strong>: Sunucu g\u00fcnl\u00fcklerini d\u00fczenli olarak inceleyerek, hotlink giri\u015fimlerini izleyin.<\/p>\n<p><strong>Performans Analizi<\/strong>: Hotlink korumas\u0131n\u0131n web sitenizin performans\u0131na etkilerini analiz edin.<\/p>\n<p><strong>G\u00fcncellemeler ve Ayarlar\u0131n \u0130yile\u015ftirilmesi<\/strong>: Yap\u0131land\u0131rmalar\u0131n\u0131z\u0131 d\u00fczenli olarak g\u00f6zden ge\u00e7irin ve ihtiya\u00e7lara g\u00f6re ayarlamalar yap\u0131n.<\/p>\n<p><strong>Sonu\u00e7<\/strong>:<\/p>\n<p><strong><a href=\"https:\/\/sh.com.tr\/linux-hosting\">Linux hostingde<\/a><\/strong> etkili bir <strong>Hotlink Korumas\u0131<\/strong>, i\u00e7erik h\u0131rs\u0131zl\u0131\u011f\u0131n\u0131 \u00f6nlemek ve sunucu kaynaklar\u0131n\u0131 korumak i\u00e7in hayati \u00f6nem ta\u015f\u0131r. Apache ve Nginx gibi pop\u00fcler web sunucular\u0131, .htaccess ve sunucu yap\u0131land\u0131rma dosyalar\u0131 arac\u0131l\u0131\u011f\u0131yla bu korumay\u0131 sa\u011flar. Hotlink korumas\u0131, bant geni\u015fli\u011fi tasarrufu sa\u011flar, i\u00e7eri\u011finizin kontrol\u00fcn\u00fc elinizde tutman\u0131za yard\u0131mc\u0131 olur ve sunucu performans\u0131n\u0131z\u0131 iyile\u015ftirir.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Linux Hostingde G\u00fcvenlik Duvar\u0131 (Firewall) Kurulumu, web sunucular\u0131n\u0131z\u0131n g\u00fcvenli\u011fini sa\u011flama a\u00e7\u0131s\u0131ndan kritik \u00f6neme sahiptir. Bir Linux tabanl\u0131 sunucuda firewall kurulumu, d\u0131\u015f tehditlere kar\u015f\u0131 koruma sa\u011flar ve sistem kaynaklar\u0131n\u0131z\u0131 etkin bir \u015fekilde koruman\u0131za yard\u0131mc\u0131 olur. Bu s\u00fcre\u00e7, \u00e7e\u015fitli firewall ara\u00e7lar\u0131 kullan\u0131larak ve belirli konfig\u00fcrasyon ad\u0131mlar\u0131 izlenerek ger\u00e7ekle\u015ftirilir. 1. Firewall Yaz\u0131l\u0131m Se\u00e7imi: Linux sunucularda pop\u00fcler firewall \u00e7\u00f6z\u00fcmleri [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":14882,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[669,668,53],"class_list":["post-14855","post","type-post","status-publish","format-standard","has-post-thumbnail","category-hosting","tag-guvenlik-duvari-kurulumu","tag-hotlink","tag-linux-hosting"],"_links":{"self":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts\/14855","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=14855"}],"version-history":[{"count":0,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts\/14855\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/media\/14882"}],"wp:attachment":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=14855"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=14855"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=14855"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}