{"id":17035,"date":"2025-10-04T08:30:56","date_gmt":"2025-10-04T05:30:56","guid":{"rendered":"https:\/\/blog.sh.com.tr\/?p=17035"},"modified":"2025-07-08T11:20:56","modified_gmt":"2025-07-08T08:20:56","slug":"vds-sunucuda-firewall-nasil-yapilandirilir","status":"publish","type":"post","link":"https:\/\/sh.com.tr\/blog\/vds-sunucuda-firewall-nasil-yapilandirilir\/","title":{"rendered":"VDS Sunucuda Firewall Nas\u0131l Yap\u0131land\u0131r\u0131l\u0131r?"},"content":{"rendered":"<p style=\"text-align: justify;\" data-start=\"283\" data-end=\"654\"><a href=\"https:\/\/sh.com.tr\/vds-server\"><strong data-start=\"283\" data-end=\"297\">VDS sunucu<\/strong><\/a>, yani sanal \u00f6zel sunucu, size y\u00fcksek performans ve esneklik sunarken ayn\u0131 zamanda g\u00fcvenli\u011finizi de sizin y\u00f6netmenizi gerektirir. \u00d6zellikle d\u0131\u015far\u0131dan gelebilecek sald\u0131r\u0131lara kar\u015f\u0131 <strong data-start=\"477\" data-end=\"504\">firewall yap\u0131land\u0131rmas\u0131<\/strong>, bu sunucunun en kritik savunma hatt\u0131d\u0131r. Peki, <strong data-start=\"553\" data-end=\"592\">VDS sunucuda firewall nas\u0131l kurulur<\/strong>, hangi kurallar belirlenmelidir ve nelere dikkat edilmelidir?<\/p>\n<h3 style=\"text-align: justify;\" data-start=\"661\" data-end=\"699\"><strong>Firewall Nedir ve Neden \u00d6nemlidir?<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"701\" data-end=\"962\"><strong data-start=\"701\" data-end=\"713\">Firewall<\/strong>, a\u011f trafi\u011fini izleyen, filtreleyen ve belirli kurallara g\u00f6re izin verip engelleyen bir g\u00fcvenlik duvar\u0131d\u0131r. <strong data-start=\"821\" data-end=\"859\">VDS sunucularda firewall kullanmak<\/strong>, hem d\u0131\u015f tehditlere kar\u015f\u0131 koruma sa\u011flar hem de istemedi\u011finiz trafi\u011fin sisteminize eri\u015fmesini engeller.<\/p>\n<h3 style=\"text-align: justify;\" data-start=\"969\" data-end=\"1023\"><strong>VDS Sunucuda Firewall Kurulumu Nereden Ba\u015flanmal\u0131?<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"1025\" data-end=\"1318\">\u0130lk ad\u0131m, hangi i\u015fletim sistemini kulland\u0131\u011f\u0131n\u0131za g\u00f6re de\u011fi\u015fir. <strong data-start=\"1088\" data-end=\"1119\">Linux tabanl\u0131 VDS sunucular<\/strong> i\u00e7in en yayg\u0131n ara\u00e7lar iptables , ufw (Uncomplicated Firewall) ve firewalld\u00a0gibi \u00e7\u00f6z\u00fcmlerdir. <strong data-start=\"1219\" data-end=\"1252\">Windows tabanl\u0131 VDS sunucular<\/strong> i\u00e7in ise yerle\u015fik Windows Defender Firewall arac\u0131 kullan\u0131labilir.<\/p>\n<h3 style=\"text-align: justify;\" data-start=\"1325\" data-end=\"1371\"><strong>Linux VDS Sunucuda Firewall Yap\u0131land\u0131rmas\u0131<\/strong><\/h3>\n<h4 style=\"text-align: justify;\" data-start=\"1373\" data-end=\"1414\">\ud83d\udd27 1. ufw\u00a0Kullanarak Temel Ayarlar<\/h4>\n<p style=\"text-align: justify;\" data-start=\"1416\" data-end=\"1458\">Ubuntu gibi da\u011f\u0131t\u0131mlarda \u00f6nerilen ara\u00e7t\u0131r.<\/p>\n<div class=\"contain-inline-size rounded-2xl relative bg-token-sidebar-surface-primary\" style=\"text-align: justify;\">\n<div class=\"flex items-center text-token-text-secondary px-4 py-2 text-xs font-sans justify-between h-9 bg-token-sidebar-surface-primary select-none rounded-t-2xl\">bash<\/div>\n<div><\/div>\n<div class=\"overflow-y-auto p-4\" dir=\"ltr\"><code class=\"whitespace-pre! language-bash\">sudo apt install ufw<br \/>\nsudo ufw default deny incoming<br \/>\nsudo ufw default allow outgoing<br \/>\nsudo ufw allow 22\/tcp    <span class=\"hljs-comment\"># SSH ba\u011flant\u0131s\u0131 i\u00e7in<\/span><br \/>\nsudo ufw allow 80\/tcp    <span class=\"hljs-comment\"># HTTP trafi\u011fi<\/span><br \/>\nsudo ufw allow 443\/tcp   <span class=\"hljs-comment\"># HTTPS trafi\u011fi<\/span><br \/>\nsudo ufw <span class=\"hljs-built_in\">enable<\/span><br \/>\n<\/code><\/div>\n<\/div>\n<p style=\"text-align: justify;\" data-start=\"1701\" data-end=\"1861\">Bu komutlarla, yaln\u0131zca belirli portlara izin verirken di\u011fer t\u00fcm d\u0131\u015f ba\u011flant\u0131lar engellenir. B\u00f6ylece <strong data-start=\"1802\" data-end=\"1843\">VDS sunucunuzda temel g\u00fcvenlik duvar\u0131<\/strong> aktif hale gelir.<\/p>\n<h4 style=\"text-align: justify;\" data-start=\"1863\" data-end=\"1906\">\ud83d\udd10 2. iptables\u00a0ile Geli\u015fmi\u015f Kurallar<\/h4>\n<p style=\"text-align: justify;\" data-start=\"1908\" data-end=\"1953\">Daha fazla kontrol isteyen kullan\u0131c\u0131lar i\u00e7in:<\/p>\n<div class=\"contain-inline-size rounded-2xl relative bg-token-sidebar-surface-primary\" style=\"text-align: justify;\">\n<div class=\"flex items-center text-token-text-secondary px-4 py-2 text-xs font-sans justify-between h-9 bg-token-sidebar-surface-primary select-none rounded-t-2xl\">bash<\/div>\n<div class=\"sticky top-9\">\n<div class=\"absolute end-0 bottom-0 flex h-9 items-center pe-2\">\n<div class=\"bg-token-bg-elevated-secondary text-token-text-secondary flex items-center gap-4 rounded-sm px-2 font-sans text-xs\"><\/div>\n<\/div>\n<\/div>\n<div class=\"overflow-y-auto p-4\" dir=\"ltr\"><code class=\"whitespace-pre! language-bash\">iptables -P INPUT DROP<br \/>\niptables -P FORWARD DROP<br \/>\niptables -P OUTPUT ACCEPT<br \/>\niptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT<br \/>\niptables -A INPUT -p tcp --dport 22 -j ACCEPT<br \/>\niptables -A INPUT -p tcp --dport 80 -j ACCEPT<br \/>\niptables -A INPUT -p tcp --dport 443 -j ACCEPT<br \/>\n<\/code><\/div>\n<\/div>\n<p style=\"text-align: justify;\" data-start=\"2252\" data-end=\"2344\">Bu ayarlar, ba\u011flant\u0131 kuran istemcilerin yaln\u0131zca belirli hizmetlere ula\u015fmas\u0131na olanak tan\u0131r.<\/p>\n<h3 style=\"text-align: justify;\" data-start=\"2351\" data-end=\"2399\"><strong>Windows VDS Sunucuda Firewall Yap\u0131land\u0131rmas\u0131<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"2401\" data-end=\"2534\"><strong data-start=\"2401\" data-end=\"2448\">Windows sunucularda firewall yap\u0131land\u0131rmas\u0131<\/strong>, GUI (grafik aray\u00fcz) \u00fczerinden veya netsh ve PowerShell\u00a0komutlar\u0131yla yap\u0131labilir.<\/p>\n<h4 style=\"text-align: justify;\" data-start=\"2536\" data-end=\"2552\"><strong>\u2699\ufe0f Ad\u0131mlar:<\/strong><\/h4>\n<p data-start=\"2556\" data-end=\"2638\"><strong data-start=\"2556\" data-end=\"2623\">\u2192Control Panel &gt; System and Security &gt; Windows Defender Firewall<\/strong> k\u0131sm\u0131na gidin.<\/p>\n<p data-start=\"2642\" data-end=\"2682\">\u2192Sol men\u00fcden <strong data-start=\"2654\" data-end=\"2675\">Advanced Settings<\/strong> se\u00e7in.<\/p>\n<p data-start=\"2686\" data-end=\"2777\">\u2192Gerekli kurallar\u0131 <strong data-start=\"2704\" data-end=\"2721\">Inbound Rules<\/strong> k\u0131sm\u0131ndan ekleyin (\u00f6rne\u011fin port 3389 i\u00e7in RDP eri\u015fimi).<\/p>\n<p data-start=\"2781\" data-end=\"2848\">\u2192Gereksiz servislerin d\u0131\u015f d\u00fcnyaya a\u00e7\u0131k olup olmad\u0131\u011f\u0131n\u0131 kontrol edin.<\/p>\n<h3 style=\"text-align: justify;\" data-start=\"2855\" data-end=\"2889\"><strong>Hangi Portlara \u0130zin Verilmeli?<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"2891\" data-end=\"2979\">Temel bir <strong data-start=\"2901\" data-end=\"2935\">VDS firewall yap\u0131land\u0131rmas\u0131nda<\/strong> genellikle a\u015fa\u011f\u0131daki portlara izin verilir:<\/p>\n<ul style=\"text-align: justify;\" data-start=\"2981\" data-end=\"3254\">\n<li data-start=\"2981\" data-end=\"3017\">\n<p data-start=\"2983\" data-end=\"3017\"><strong data-start=\"2983\" data-end=\"2989\">22<\/strong> \u2192 SSH (Linux y\u00f6netimi i\u00e7in)<\/p>\n<\/li>\n<li data-start=\"3018\" data-end=\"3048\">\n<p data-start=\"3020\" data-end=\"3048\"><strong data-start=\"3020\" data-end=\"3026\">80<\/strong> \u2192 HTTP (web sunucusu)<\/p>\n<\/li>\n<li data-start=\"3049\" data-end=\"3091\">\n<p data-start=\"3051\" data-end=\"3091\"><strong data-start=\"3051\" data-end=\"3058\">443<\/strong> \u2192 HTTPS (g\u00fcvenli web ba\u011flant\u0131s\u0131)<\/p>\n<\/li>\n<li data-start=\"3092\" data-end=\"3153\">\n<p data-start=\"3094\" data-end=\"3153\"><strong data-start=\"3094\" data-end=\"3102\">3306<\/strong> \u2192 MySQL (gerekliyse sadece i\u00e7 eri\u015fime a\u00e7\u0131k olmal\u0131)<\/p>\n<\/li>\n<li data-start=\"3154\" data-end=\"3200\">\n<p data-start=\"3156\" data-end=\"3200\"><strong data-start=\"3156\" data-end=\"3165\">21\/20<\/strong> \u2192 FTP (m\u00fcmk\u00fcnse SFTP kullan\u0131lmal\u0131)<\/p>\n<\/li>\n<li data-start=\"3201\" data-end=\"3254\">\n<p data-start=\"3203\" data-end=\"3254\"><strong data-start=\"3203\" data-end=\"3211\">3389<\/strong> \u2192 RDP (sadece belirli IP&#8217;lere a\u00e7\u0131k olmal\u0131)<\/p>\n<\/li>\n<\/ul>\n<h3 style=\"text-align: justify;\" data-start=\"3261\" data-end=\"3289\"><strong>Ekstra G\u00fcvenlik \u0130pu\u00e7lar\u0131<\/strong><\/h3>\n<ul style=\"text-align: justify;\" data-start=\"3291\" data-end=\"3701\">\n<li data-start=\"3291\" data-end=\"3337\">\n<p data-start=\"3293\" data-end=\"3337\">\ud83d\udd10 <strong data-start=\"3296\" data-end=\"3335\">SSH eri\u015fimini IP ile s\u0131n\u0131rland\u0131r\u0131n.<\/strong><\/p>\n<\/li>\n<li data-start=\"3338\" data-end=\"3416\">\n<p data-start=\"3340\" data-end=\"3416\">\ud83d\udee1\ufe0f <strong data-start=\"3344\" data-end=\"3414\">Port knocking veya fail2ban gibi ek g\u00fcvenlik yaz\u0131l\u0131mlar\u0131 kullan\u0131n.<\/strong><\/p>\n<\/li>\n<li data-start=\"3417\" data-end=\"3481\">\n<p data-start=\"3419\" data-end=\"3481\">\ud83d\udd04 <strong data-start=\"3422\" data-end=\"3479\">Firewall kurallar\u0131n\u0131z\u0131 d\u00fczenli olarak g\u00f6zden ge\u00e7irin.<\/strong><\/p>\n<\/li>\n<li data-start=\"3482\" data-end=\"3559\">\n<p data-start=\"3484\" data-end=\"3559\">\ud83d\udcdc <strong data-start=\"3487\" data-end=\"3508\">Loglar\u0131 inceleyin<\/strong>, hangi IP\u2019lerin eri\u015fmeye \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 takip edin.<\/p>\n<\/li>\n<li data-start=\"3560\" data-end=\"3701\">\n<p data-start=\"3562\" data-end=\"3701\">\ud83d\udccd <strong data-start=\"3565\" data-end=\"3623\">Cloud panellerinde (\u00f6rne\u011fin Proxmox, VirtPanel, Plesk)<\/strong> firewall\u2019\u0131 hem i\u015fletim sisteminde hem de d\u0131\u015f katmanda ayr\u0131 ayr\u0131 yap\u0131land\u0131r\u0131n.<\/p>\n<\/li>\n<\/ul>\n<h3 style=\"text-align: justify;\" data-start=\"3708\" data-end=\"3756\"><strong>VDS Sunucuda Firewall Kullan\u0131m\u0131n\u0131n Faydalar\u0131<\/strong><\/h3>\n<ul style=\"text-align: justify;\" data-start=\"3758\" data-end=\"4041\">\n<li data-start=\"3758\" data-end=\"3820\">\n<p data-start=\"3760\" data-end=\"3820\">DDoS gibi sald\u0131r\u0131lara kar\u015f\u0131 ilk savunma hatt\u0131n\u0131 olu\u015fturur.<\/p>\n<\/li>\n<li data-start=\"3821\" data-end=\"3877\">\n<p data-start=\"3823\" data-end=\"3877\">Sisteme yaln\u0131zca yetkili trafi\u011fin ula\u015fmas\u0131n\u0131 sa\u011flar.<\/p>\n<\/li>\n<li data-start=\"3878\" data-end=\"3965\">\n<p data-start=\"3880\" data-end=\"3965\">Performans kayb\u0131n\u0131 engeller \u00e7\u00fcnk\u00fc k\u00f6t\u00fc niyetli trafik sistem kaynaklar\u0131n\u0131 t\u00fcketmez.<\/p>\n<\/li>\n<li data-start=\"3966\" data-end=\"4041\">\n<p data-start=\"3968\" data-end=\"4041\">Yasal ve d\u00fczenleyici uyumluluk (\u00f6rne\u011fin KVKK, GDPR) a\u00e7\u0131s\u0131ndan gereklidir.<\/p>\n<\/li>\n<\/ul>\n<h4 style=\"text-align: justify;\" data-start=\"4048\" data-end=\"4089\"><strong>G\u00fcvenli\u011fin Temeli Firewall\u2019dur<\/strong><\/h4>\n<p style=\"text-align: justify;\" data-start=\"4091\" data-end=\"4397\">Her ne kadar <a href=\"https:\/\/sh.com.tr\/vds-server\"><strong data-start=\"4104\" data-end=\"4121\">VDS sunucular<\/strong> <\/a>performans ve kontrol anlam\u0131nda avantaj sa\u011flasa da, bu \u00f6zg\u00fcrl\u00fc\u011f\u00fcn bedeli sorumlulukla gelir. \u0130yi yap\u0131land\u0131r\u0131lmam\u0131\u015f bir <strong data-start=\"4241\" data-end=\"4253\">firewall<\/strong>, sisteminizi k\u00f6t\u00fc niyetli eri\u015fimlere a\u00e7\u0131k hale getirir. Bu y\u00fczden <strong data-start=\"4320\" data-end=\"4347\">firewall yap\u0131land\u0131rmas\u0131<\/strong>, bir VDS kurulumunun ilk ve vazge\u00e7ilmez ad\u0131m\u0131d\u0131r.<\/p>\n<p style=\"text-align: justify;\" data-start=\"4399\" data-end=\"4584\">Sunucunuzun i\u015fletim sistemine, bar\u0131nd\u0131rd\u0131\u011f\u0131 uygulamalara ve kullan\u0131m amac\u0131na g\u00f6re \u00f6zel kurallar belirlemeli; zaman zaman bu kurallar\u0131 g\u00fcncelleyerek <strong data-start=\"4547\" data-end=\"4568\">proaktif g\u00fcvenlik<\/strong> sa\u011flamal\u0131s\u0131n\u0131z.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>VDS sunucu, yani sanal \u00f6zel sunucu, size y\u00fcksek performans ve esneklik sunarken ayn\u0131 zamanda g\u00fcvenli\u011finizi de sizin y\u00f6netmenizi gerektirir. \u00d6zellikle d\u0131\u015far\u0131dan gelebilecek sald\u0131r\u0131lara kar\u015f\u0131 firewall yap\u0131land\u0131rmas\u0131, bu sunucunun en kritik savunma hatt\u0131d\u0131r. Peki, VDS sunucuda firewall nas\u0131l kurulur, hangi kurallar belirlenmelidir ve nelere dikkat edilmelidir? Firewall Nedir ve Neden \u00d6nemlidir? Firewall, a\u011f trafi\u011fini izleyen, filtreleyen [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":17036,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1951,1950,1949],"class_list":["post-17035","post","type-post","status-publish","format-standard","has-post-thumbnail","category-sunucu","tag-firewall-ayarlari-vds","tag-vds-firewall-nasil-kurulur","tag-vds-sunucu-firewall-yapilandirma"],"_links":{"self":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts\/17035","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=17035"}],"version-history":[{"count":0,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts\/17035\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/media\/17036"}],"wp:attachment":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=17035"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=17035"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=17035"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}