{"id":32533,"date":"2025-10-23T00:41:05","date_gmt":"2025-10-22T21:41:05","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=32533"},"modified":"2025-10-23T00:41:05","modified_gmt":"2025-10-22T21:41:05","slug":"iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/","title":{"rendered":"Iptables G\u00fcvenlik Duvar\u0131 Kurallar\u0131n\u0131 Yeni Sunucuya Ta\u015f\u0131ma Rehberi"},"content":{"rendered":"

<\/p>\n

Iptables G\u00fcvenlik Duvar\u0131 Kurallar\u0131n\u0131 Yeni Sunucuya Ta\u015f\u0131ma Rehberi<\/h2>\n

Sunucular\u0131n g\u00fcvenli\u011fi, modern bilgi i\u015flem altyap\u0131lar\u0131n\u0131n en kritik unsurlar\u0131ndan biridir. Bu g\u00fcvenli\u011fin temel ta\u015flar\u0131ndan biri de a\u011f trafi\u011fini kontrol eden g\u00fcvenlik duvarlar\u0131d\u0131r. Linux sistemlerde en yayg\u0131n kullan\u0131lan ve g\u00fc\u00e7l\u00fc g\u00fcvenlik duvar\u0131 \u00e7\u00f6z\u00fcmlerinden biri olan Iptables, a\u011f paketlerini filtrelemek, y\u00f6nlendirmek ve de\u011fi\u015ftirmek i\u00e7in esnek bir yap\u0131 sunar. Ancak zaman zaman sunucular\u0131 y\u00fckseltmek, felaket kurtarma senaryolar\u0131 uygulamak veya altyap\u0131y\u0131 modernize etmek gibi nedenlerle mevcut Iptables kurallar\u0131n\u0131 yeni bir sunucuya ta\u015f\u0131mak gerekebilir. Bu ta\u015f\u0131ma i\u015flemi, hassas bir s\u00fcre\u00e7 olup, do\u011fru yap\u0131lmad\u0131\u011f\u0131 takdirde sunucuya eri\u015fimin kesilmesi veya g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n olu\u015fmas\u0131 gibi ciddi sorunlara yol a\u00e7abilir.<\/p>\n

Bu makale, Iptables g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131n eski bir sunucudan yeni bir sunucuya sorunsuz ve g\u00fcvenli bir \u015fekilde nas\u0131l ta\u015f\u0131naca\u011f\u0131n\u0131 ad\u0131m ad\u0131m a\u00e7\u0131klamaktad\u0131r. Ta\u015f\u0131ma \u00f6ncesi haz\u0131rl\u0131klardan, kurallar\u0131n aktar\u0131lmas\u0131na, do\u011frulanmas\u0131na ve kal\u0131c\u0131 hale getirilmesine kadar t\u00fcm s\u00fcreci kapsayacak ve s\u0131k kar\u015f\u0131la\u015f\u0131lan sorunlara \u00e7\u00f6z\u00fcm \u00f6nerileri sunacakt\u0131r. Amac\u0131m\u0131z, bu karma\u015f\u0131k s\u00fcreci basitle\u015ftirerek, sistem y\u00f6neticilerine g\u00fcvenilir bir rehber sunmakt\u0131r.<\/p>\n

Iptables’\u0131 Anlamak: Temel Kavramlar<\/h3>\n

Iptables kurallar\u0131n\u0131 etkili bir \u015fekilde ta\u015f\u0131yabilmek i\u00e7in \u00f6ncelikle Iptables’\u0131n temel \u00e7al\u0131\u015fma prensiplerini iyi kavramak \u00f6nemlidir. Iptables, Linux \u00e7ekirde\u011finin netfilter mod\u00fcl\u00fc ile etkile\u015fime girerek \u00e7al\u0131\u015f\u0131r ve a\u011f trafi\u011fini belirli kurallar zinciri (chain) ve tablolar (table) arac\u0131l\u0131\u011f\u0131yla y\u00f6netir.<\/p>\n

Tablolar (Tables)<\/h4>\n

Iptables, farkl\u0131 ama\u00e7lar i\u00e7in be\u015f ana tablo kullan\u0131r:
\n* filter:<\/strong> En s\u0131k kullan\u0131lan tablodur. Gelen, giden ve y\u00f6nlendirilen paketleri filtrelemek i\u00e7in kullan\u0131l\u0131r. (ACCEPT, DROP, REJECT)
\n* nat:<\/strong> A\u011f Adresi \u00c7evirisi (Network Address Translation) yapmak i\u00e7in kullan\u0131l\u0131r. \u00d6rne\u011fin, bir i\u00e7 a\u011fdaki sunucular\u0131n internete \u00e7\u0131k\u0131\u015f\u0131n\u0131 sa\u011flamak veya d\u0131\u015far\u0131dan gelen ba\u011flant\u0131lar\u0131 i\u00e7 a\u011fdaki bir sunucuya y\u00f6nlendirmek (port y\u00f6nlendirme). (PREROUTING, POSTROUTING, OUTPUT)
\n* mangle:<\/strong> Paket ba\u015fl\u0131klar\u0131n\u0131 de\u011fi\u015ftirmek i\u00e7in kullan\u0131l\u0131r. \u00d6rne\u011fin, TTL (Time To Live) de\u011ferini veya hizmet kalitesi (QoS) i\u015faretlerini de\u011fi\u015ftirmek. (PREROUTING, INPUT, FORWARD, OUTPUT, POSTROUTING)
\n* raw:<\/strong> Ba\u011flant\u0131 izleme (connection tracking) sistemini devre d\u0131\u015f\u0131 b\u0131rakmak i\u00e7in kullan\u0131l\u0131r. Genellikle y\u00fcksek performans gerektiren durumlarda kullan\u0131l\u0131r. (PREROUTING, OUTPUT)
\n* security:<\/strong> SELinux gibi g\u00fcvenlik ba\u011flam\u0131 i\u015faretlerini ayarlamak i\u00e7in kullan\u0131l\u0131r. Daha \u00e7ok geli\u015fmi\u015f g\u00fcvenlik politikalar\u0131 i\u00e7in kullan\u0131l\u0131r. (INPUT, OUTPUT, FORWARD)<\/p>\n

Zincirler (Chains)<\/h4>\n

Her tablo, paketlerin ge\u00e7ti\u011fi belirli zincirleri i\u00e7erir. Bu zincirler, paketlerin hangi a\u015famada i\u015flenece\u011fini belirler:
\n* INPUT:<\/strong> Sunucunun kendisine gelen paketler i\u00e7in.
\n* OUTPUT:<\/strong> Sunucudan \u00e7\u0131kan paketler i\u00e7in.
\n* FORWARD:<\/strong> Sunucu \u00fczerinden ba\u015fka bir hedefe y\u00f6nlendirilen paketler i\u00e7in (\u00f6rne\u011fin bir y\u00f6nlendirici g\u00f6revi g\u00f6r\u00fcyorsa).
\n* PREROUTING:<\/strong> Paketler sunucuya ula\u015ft\u0131\u011f\u0131nda, ancak hen\u00fcz y\u00f6nlendirme karar\u0131 verilmeden \u00f6nce. (nat, mangle, raw tablolar\u0131nda bulunur)
\n* POSTROUTING:<\/strong> Paketler sunucudan \u00e7\u0131kmak \u00fczereyken, y\u00f6nlendirme karar\u0131 verildikten sonra. (nat, mangle tablolar\u0131nda bulunur)
\n* \u00d6zel Zincirler (Custom Chains):<\/strong> Kullan\u0131c\u0131lar taraf\u0131ndan olu\u015fturulan ve karma\u015f\u0131k kural setlerini daha okunabilir ve y\u00f6netilebilir hale getirmek i\u00e7in kullan\u0131lan zincirler.<\/p>\n

Kurallar (Rules)<\/h4>\n

Her zincir, belirli ko\u015fullara uyan paketlere uygulanacak bir dizi kuraldan olu\u015fur. Bir kural, bir dizi e\u015fle\u015fme (match) ve bir hedef (target) i\u00e7erir:
\n* E\u015fle\u015fmeler (Matches):<\/strong> Kaynak IP adresi, hedef IP adresi, protokol (TCP, UDP, ICMP), port numaras\u0131, a\u011f aray\u00fcz\u00fc gibi kriterler.
\n* Hedefler (Targets):<\/strong>
\n * ACCEPT:<\/strong> Paketin ge\u00e7mesine izin ver.
\n * DROP:<\/strong> Paketi sessizce d\u00fc\u015f\u00fcr (paket g\u00f6nderen taraf, paketin hedefe ula\u015fmad\u0131\u011f\u0131n\u0131 bilmez).
\n * REJECT:<\/strong> Paketi d\u00fc\u015f\u00fcr ve g\u00f6nderen tarafa bir hata mesaj\u0131 g\u00f6nder (\u00f6rne\u011fin, “Hedefe Ula\u015f\u0131lam\u0131yor”).
\n * LOG:<\/strong> Paketi sistem g\u00fcnl\u00fcklerine kaydet ve bir sonraki kurala ge\u00e7.
\n * JUMP\/GOTO:<\/strong> Paketi ba\u015fka bir \u00f6zel zincire y\u00f6nlendir.
\n * RETURN:<\/strong> Paketi mevcut zincirden bir \u00f6nceki zincire d\u00f6nd\u00fcr.<\/p>\n

Kurallar, zincir i\u00e7inde yukar\u0131dan a\u015fa\u011f\u0131ya do\u011fru i\u015flenir. Bir paket bir kurala uydu\u011funda, o kural\u0131n hedefi uygulan\u0131r ve genellikle zincirdeki di\u011fer kurallar atlan\u0131r. Bu nedenle kurallar\u0131n s\u0131ras\u0131 kritik \u00f6neme sahiptir.<\/p>\n

G\u00f6\u00e7 \u00d6ncesi: Haz\u0131rl\u0131k ve Planlama<\/h3>\n

Iptables kurallar\u0131n\u0131 ta\u015f\u0131mak, dikkatli bir haz\u0131rl\u0131k gerektirir. Bu a\u015fama, olas\u0131 sorunlar\u0131 \u00f6nlemek ve ta\u015f\u0131ma s\u00fcrecini h\u0131zland\u0131rmak i\u00e7in hayati \u00f6neme sahiptir.<\/p>\n

Mevcut Kurallar\u0131 Yedekleme ve Anlama<\/h4>\n

Ta\u015f\u0131ma i\u015flemine ba\u015flamadan \u00f6nce, eski sunucudaki t\u00fcm mevcut Iptables kurallar\u0131n\u0131n eksiksiz bir yede\u011fini almak mutlak bir zorunluluktur.<\/p>\n

* IPv4 Kurallar\u0131n\u0131 Yedekleme:<\/strong><\/p>\n

sudo iptables-save > \/root\/iptables_rules.v4<\/code><\/pre>\n
*   IPv6 Kurallar\u0131n\u0131 Yedekleme:<\/strong><\/p>\n
sudo ip6tables-save > \/root\/ip6tables_rules.v6<\/code><\/pre>\n
Bu komutlar, mevcut t\u00fcm Iptables kurallar\u0131n\u0131 (t\u00fcm tablolar ve zincirler dahil) standart \u00e7\u0131kt\u0131ya yazd\u0131r\u0131r. \u00c7\u0131kt\u0131y\u0131 bir dosyaya y\u00f6nlendirerek yedeklemi\u015f olursunuz. Bu dosyalar, yeni sunucuda kullan\u0131lacak olan kural setini i\u00e7erecektir.<\/p>\n
Yedekleme i\u015fleminden sonra, bu kural dosyalar\u0131n\u0131 ve iptables -L -n -v<\/code> komutunun \u00e7\u0131kt\u0131s\u0131n\u0131 dikkatlice inceleyerek mevcut yap\u0131land\u0131rmay\u0131 anlamak \u00f6nemlidir:
\n*   A\u011f Aray\u00fcz\u00fc \u0130simleri:<\/strong> Kurallarda kullan\u0131lan a\u011f aray\u00fcz\u00fc isimlerini (\u00f6rne\u011fin, eth0<\/code>, enp0s3<\/code>, ens33<\/code>) not al\u0131n. Yeni sunucudaki aray\u00fcz isimleri farkl\u0131 olabilir ve bu, kurallar\u0131n \u00e7al\u0131\u015fmamas\u0131na neden olabilir.
\n*   Portlar ve Servisler:<\/strong> Hangi portlar\u0131n hangi servisler i\u00e7in a\u00e7\u0131k oldu\u011funu ve hangi kaynak IP adreslerinden eri\u015fime izin verildi\u011fini belirleyin. Bu, yeni sunucuda servislerin do\u011fru \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frulamak i\u00e7in kritik olacakt\u0131r.
\n*   NAT Kurallar\u0131:<\/strong> E\u011fer eski sunucu NAT (A\u011f Adresi \u00c7evirisi) kurallar\u0131 kullan\u0131yorsa (\u00f6rne\u011fin, port y\u00f6nlendirme veya d\u0131\u015far\u0131ya \u00e7\u0131kan trafi\u011fin maskelenmesi), bu kurallar\u0131 dikkatle inceleyin. NAT kurallar\u0131 genellikle a\u011f topolojisine s\u0131k\u0131 s\u0131k\u0131ya ba\u011fl\u0131d\u0131r.
\n*   \u00d6zel Zincirler:<\/strong> Herhangi bir \u00f6zel zincir tan\u0131mlanm\u0131\u015fsa, bunlar\u0131n ne i\u015fe yarad\u0131\u011f\u0131n\u0131 ve hangi ana zincirlerden \u00e7a\u011fr\u0131ld\u0131\u011f\u0131n\u0131 anlay\u0131n.
\n*   Kernel Mod\u00fclleri:<\/strong> Baz\u0131 Iptables e\u015fle\u015fmeleri veya hedefleri (\u00f6rne\u011fin, conntrack<\/code>, string<\/code>, limit<\/code>) belirli kernel mod\u00fcllerinin y\u00fcklenmesini gerektirebilir. Eski sunucuda lsmod<\/code> \u00e7\u0131kt\u0131s\u0131n\u0131 kontrol ederek bu mod\u00fclleri not almak faydal\u0131 olabilir.<\/p>\n
Yeni Sunucu Ortam\u0131n\u0131 Haz\u0131rlama<\/h4>\n
Yeni sunucuya ge\u00e7i\u015f yapmadan \u00f6nce, hedef ortam\u0131n eski sunucuyla uyumlu oldu\u011fundan ve gerekli \u00f6n ko\u015fullar\u0131 kar\u015f\u0131lad\u0131\u011f\u0131ndan emin olun.
\n*   \u0130\u015fletim Sistemi ve Kernel S\u00fcr\u00fcm\u00fc:<\/strong> Yeni sunucunun i\u015fletim sistemi (\u00f6rne\u011fin, Ubuntu 20.04 vs. Ubuntu 22.04, CentOS 7 vs. CentOS 8) ve kernel s\u00fcr\u00fcm\u00fc, Iptables davran\u0131\u015f\u0131nda k\u00fc\u00e7\u00fck farkl\u0131l\u0131klara yol a\u00e7abilir. Genellikle b\u00fcy\u00fck bir sorun te\u015fkil etmezler, ancak nadiren uyumsuzluklar g\u00f6r\u00fclebilir.
\n*   A\u011f Aray\u00fcz\u00fc \u0130simleri:<\/strong> Yeni sunucudaki a\u011f aray\u00fcz\u00fc isimlerini belirleyin (ip a<\/code> veya ifconfig<\/code>). E\u011fer eski sunucudaki kurallar\u0131n\u0131zda eth0<\/code> gibi isimler kullan\u0131l\u0131yorsa ve yeni sunucuda ens33<\/code> gibi isimler varsa, kural dosyalar\u0131n\u0131z\u0131 bu yeni isimlere g\u00f6re d\u00fczenlemeniz gerekecektir.
\n*   Iptables Kal\u0131c\u0131l\u0131k Mekanizmas\u0131:<\/strong> Yeni sunucuda Iptables kurallar\u0131n\u0131n yeniden ba\u015flatmalarda kal\u0131c\u0131 olmas\u0131n\u0131 sa\u011flayacak bir mekanizman\u0131n kurulu oldu\u011fundan emin olun.
\n    *   Debian\/Ubuntu tabanl\u0131 sistemlerde:<\/strong> iptables-persistent<\/code> veya netfilter-persistent<\/code> paketleri kullan\u0131l\u0131r.<\/p>\n
sudo apt update\n        sudo apt install iptables-persistent<\/code><\/pre>\n
        Kurulum s\u0131ras\u0131nda mevcut kurallar\u0131 kaydetmek isteyip istemedi\u011finiz sorulacakt\u0131r. Hen\u00fcz kurallar\u0131 y\u00fcklemedi\u011fimiz i\u00e7in bu a\u015famay\u0131 bo\u015f ge\u00e7ebiliriz.
\n    *   CentOS\/RHEL tabanl\u0131 sistemlerde:<\/strong> Geleneksel olarak iptables-services<\/code> paketi kullan\u0131l\u0131rd\u0131. Ancak CentOS\/RHEL 7 ve sonras\u0131 s\u00fcr\u00fcmlerde firewalld<\/code> varsay\u0131lan g\u00fcvenlik duvar\u0131 y\u00f6neticisidir. E\u011fer Iptables kullanmaya devam edecekseniz firewalld<\/code>‘\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131p iptables-services<\/code>‘\u0131 kurman\u0131z gerekebilir.<\/p>\n
sudo systemctl stop firewalld\n        sudo systemctl disable firewalld\n        sudo yum install iptables-services\n        sudo systemctl enable iptables\n        sudo systemctl enable ip6tables<\/code><\/pre>\n
*   Temel Eri\u015fim:<\/strong> Yeni sunucuya SSH veya konsol arac\u0131l\u0131\u011f\u0131yla eri\u015fiminizin oldu\u011fundan emin olun. Ta\u015f\u0131ma s\u0131ras\u0131nda olas\u0131 kilitlenmeleri \u00f6nlemek i\u00e7in, \u00f6zellikle SSH portuna (varsay\u0131lan 22) eri\u015fime izin veren temel bir kural setini ge\u00e7ici olarak y\u00fcklemek iyi bir fikir olabilir. \u00d6rne\u011fin:<\/p>\n
sudo iptables -A INPUT -i lo -j ACCEPT\n    sudo iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT\n    sudo iptables -A INPUT -p tcp --dport 22 -j ACCEPT\n    sudo iptables -P INPUT DROP # Bu, t\u00fcm di\u011fer gelen ba\u011flant\u0131lar\u0131 engeller.<\/code><\/pre>\n
    Ancak bu ge\u00e7ici kurallar\u0131 kal\u0131c\u0131 hale getirmeyin; sadece ta\u015f\u0131ma s\u0131ras\u0131nda kilitlenmeyi \u00f6nlemek i\u00e7indir.<\/p>\n
G\u00f6\u00e7\u00fc Planlama<\/h4>\n
*   Kesinti S\u00fcresi:<\/strong> Ta\u015f\u0131ma i\u015fleminin ne kadar s\u00fcrece\u011fini tahmin edin ve bu s\u00fcre zarf\u0131nda servislerinizin ne kadar s\u00fcreyle eri\u015filemez olabilece\u011fini belirleyin. M\u00fcmk\u00fcnse, d\u00fc\u015f\u00fck trafikli bir zaman diliminde ta\u015f\u0131ma yap\u0131n.
\n*   Geri Alma Plan\u0131 (Rollback Plan\u0131):<\/strong> Herhangi bir sorun durumunda eski sunucuya geri d\u00f6nebilmek i\u00e7in net bir plan\u0131n\u0131z olmal\u0131d\u0131r. Eski sunucunun yede\u011fini almak ve ta\u015f\u0131ma sonras\u0131 bir s\u00fcre daha aktif tutmak iyi bir stratejidir.
\n*   Test Stratejisi:<\/strong> Ta\u015f\u0131ma sonras\u0131 hangi servisleri ve portlar\u0131 nas\u0131l test edece\u011finizi belirleyin. \u0130\u00e7eriden ve d\u0131\u015far\u0131dan eri\u015fim testleri yapmay\u0131 planlay\u0131n.<\/p>\n
G\u00f6\u00e7 Ad\u0131mlar\u0131<\/h3>\n
Haz\u0131rl\u0131klar tamamland\u0131ktan sonra, Iptables kurallar\u0131n\u0131 yeni sunucuya ta\u015f\u0131ma i\u015flemine ba\u015flayabiliriz.<\/p>\n
Ad\u0131m 1: Kurallar\u0131 Yeni Sunucuya Aktarma<\/h4>\n
Eski sunucuda yedekledi\u011finiz iptables_rules.v4<\/code> ve ip6tables_rules.v6<\/code> dosyalar\u0131n\u0131 yeni sunucuya aktar\u0131n. Bunun i\u00e7in scp<\/code> komutunu kullanmak en yayg\u0131n ve g\u00fcvenli yoldur:<\/p>\n
# Eski sunucudan yeni sunucuya\nscp \/root\/iptables_rules.v4 user@new_server_ip:\/root\/\nscp \/root\/ip6tables_rules.v6 user@new_server_ip:\/root\/<\/code><\/pre>\n
Alternatif olarak, bir bulut depolama hizmeti veya rsync<\/code> de kullan\u0131labilir. Dosyalar\u0131n yeni sunucuda \/root\/<\/code> dizini gibi g\u00fcvenli bir yerde oldu\u011fundan emin olun.<\/p>\n
Ad\u0131m 2: Kural Dosyalar\u0131n\u0131 D\u00fczenleme (Gerekliyse)<\/h4>\n
E\u011fer yeni sunucunun a\u011f aray\u00fcz\u00fc isimleri eski sunucudan farkl\u0131ysa, aktard\u0131\u011f\u0131n\u0131z kural dosyalar\u0131n\u0131 d\u00fczenlemeniz gerekir. \u00d6rne\u011fin, eski sunucuda eth0<\/code> olan bir aray\u00fcz, yeni sunucuda ens33<\/code> ise, kural dosyas\u0131ndaki t\u00fcm eth0<\/code> ifadelerini ens33<\/code> ile de\u011fi\u015ftirmeniz gerekir.<\/p>\n
# Yeni sunucuda\nsed -i 's\/-i eth0\/-i ens33\/g' \/root\/iptables_rules.v4\nsed -i 's\/-o eth0\/-o ens33\/g' \/root\/iptables_rules.v4\n
ip6tables i\u00e7in de benzer de\u011fi\u015fiklikler yap\u0131labilir.<\/code><\/pre>\n<\/h2>\n
Bu i\u015flemi yaparken dikkatli olun ve de\u011fi\u015fiklikleri yapmadan \u00f6nce orijinal dosyan\u0131n bir yede\u011fini al\u0131n.<\/p>\n
Ad\u0131m 3: Kurallar\u0131 Yeni Sunucuya Y\u00fckleme (Kritik Ad\u0131m!)<\/h4>\n
Bu ad\u0131m, ta\u015f\u0131ma s\u00fcrecinin en kritik ve potansiyel olarak en riskli k\u0131sm\u0131d\u0131r. Kurallar\u0131 yanl\u0131\u015f y\u00fcklemek, sunucuya eri\u015fiminizi tamamen kaybetmenize neden olabilir.<\/p>\n
\u00d6NEML\u0130 UYARI:<\/strong> Kurallar\u0131 y\u00fcklemeden \u00f6nce, SSH ba\u011flant\u0131n\u0131z\u0131n kesilmesi durumunda sunucuya tekrar eri\u015febilece\u011finizden emin olun. Bu, bulut sa\u011flay\u0131c\u0131n\u0131z\u0131n y\u00f6netim konsolu \u00fczerinden eri\u015fim veya sunucunun fiziksel konsolu arac\u0131l\u0131\u011f\u0131yla olabilir. Ayr\u0131ca, kurallar\u0131 y\u00fckledikten sonra belirli bir s\u00fcre i\u00e7inde otomatik olarak geri al\u0131nmas\u0131n\u0131 sa\u011flayacak bir g\u00fcvenlik \u00f6nlemi almak \u00e7ok ak\u0131ll\u0131ca olacakt\u0131r. \u00d6rne\u011fin, at<\/code> komutunu kullanarak:<\/p>\n
# Bu komutu iptables-restore'dan \u00d6NCE \u00e7al\u0131\u015ft\u0131r\u0131n!\necho \"iptables -F; iptables -X; iptables -P INPUT ACCEPT; iptables -P OUTPUT ACCEPT; iptables -P FORWARD ACCEPT\" | at now + 5 minutes<\/code><\/pre>\n
Bu komut, 5 dakika sonra t\u00fcm Iptables kurallar\u0131n\u0131 temizleyecek ve varsay\u0131lan politikalar\u0131 ACCEPT olarak ayarlayacakt\u0131r. E\u011fer kurallar\u0131 y\u00fckledikten sonra SSH ba\u011flant\u0131n\u0131z kesilirse veya bir sorun ya\u015farsan\u0131z, 5 dakika sonra sunucuya tekrar eri\u015fiminiz olacakt\u0131r. Kurallar ba\u015far\u0131yla y\u00fcklendikten ve do\u011fruland\u0131ktan sonra bu at<\/code> i\u015fini iptal edebilirsiniz (atq<\/code> ile i\u015fi bulup atrm <\/code> ile iptal edebilirsiniz).<\/p>\n
\u015eimdi kurallar\u0131 y\u00fckleyebiliriz:<\/p>\n
# IPv4 kurallar\u0131n\u0131 y\u00fckle\nsudo iptables-restore < \/root\/iptables_rules.v4\n\n
IPv6 kurallar\u0131n\u0131 y\u00fckle<\/h2>\nsudo ip6tables-restore < \/root\/ip6tables_rules.v6<\/code><\/pre>\n
Bu komutlar, yedekledi\u011finiz dosyalardaki kurallar\u0131 etkin Iptables yap\u0131land\u0131rmas\u0131na y\u00fckleyecektir.<\/p>\n
Ad\u0131m 4: Kurallar\u0131 Do\u011frulama<\/h4>\n
Kurallar y\u00fcklendikten hemen sonra, beklendi\u011fi gibi \u00e7al\u0131\u015ft\u0131klar\u0131ndan emin olmak i\u00e7in do\u011frulama yap\u0131n.<\/p>\n
*   Kural Listesini G\u00f6r\u00fcnt\u00fcleme:<\/strong><\/p>\n
sudo iptables -L -n -v\n    sudo ip6tables -L -n -v<\/code><\/pre>\n
    Bu komutlar\u0131n \u00e7\u0131kt\u0131s\u0131n\u0131 eski sunucudaki \u00e7\u0131kt\u0131larla kar\u015f\u0131la\u015ft\u0131r\u0131n. T\u00fcm zincirlerin ve kurallar\u0131n do\u011fru bir \u015fekilde y\u00fcklendi\u011finden emin olun. Paket ve bayt saya\u00e7lar\u0131, kurallar\u0131n aktif olarak kullan\u0131l\u0131p kullan\u0131lmad\u0131\u011f\u0131n\u0131 anlaman\u0131za yard\u0131mc\u0131 olabilir.
\n*   Ba\u011flant\u0131 Testleri:<\/strong>
\n    *   SSH ba\u011flant\u0131n\u0131z\u0131n hala \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olun.
\n    *   Web sunucusu (port 80\/443), veritaban\u0131 (\u00f6rne\u011fin, port 3306), e-posta sunucusu (port 25, 110, 143, 465, 587, 993, 995) gibi t\u00fcm kritik servislerinize hem i\u00e7eriden (localhost) hem de d\u0131\u015far\u0131dan (istemci bilgisayar\u0131n\u0131zdan) eri\u015fimi test edin.
\n    *   telnet<\/code>, nc<\/code> (netcat) veya nmap<\/code> gibi ara\u00e7lar\u0131 kullanarak belirli portlara ba\u011flant\u0131lar\u0131 kontrol edebilirsiniz.
\n    *   ping<\/code> komutuyla ICMP trafi\u011finin do\u011fru \u015fekilde i\u015flendi\u011fini kontrol edin.
\n*   G\u00fcnl\u00fckleri Kontrol Etme:<\/strong> E\u011fer kurallar\u0131n\u0131zda LOG<\/code> hedefi varsa, dmesg<\/code> veya \/var\/log\/syslog<\/code> gibi sistem g\u00fcnl\u00fcklerini kontrol ederek engellenen veya kabul edilen paketlerle ilgili kay\u0131tlar\u0131 inceleyin. Bu, yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f kurallar\u0131 tespit etmenize yard\u0131mc\u0131 olabilir.<\/p>\n
Do\u011frulama ba\u015far\u0131l\u0131 olursa, at<\/code> komutuyla ayarlad\u0131\u011f\u0131n\u0131z otomatik geri alma i\u015fini iptal etmeyi unutmay\u0131n (atq<\/code> ve atrm<\/code> ile).<\/p>\n
Ad\u0131m 5: Kurallar\u0131 Kal\u0131c\u0131 Hale Getirme<\/h4>\n
Kurallar\u0131n do\u011fru \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olduktan sonra, sunucu yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda da ge\u00e7erli kalmalar\u0131n\u0131 sa\u011flaman\u0131z gerekir.<\/p>\n
*   Debian\/Ubuntu tabanl\u0131 sistemlerde (iptables-persistent<\/code> veya netfilter-persistent<\/code>):<\/strong><\/p>\n
sudo netfilter-persistent save\n    # veya eski versiyonlarda\n    sudo service netfilter-persistent save\n    # veya do\u011frudan dosyalara kaydetmek i\u00e7in\n    sudo iptables-save > \/etc\/iptables\/rules.v4\n    sudo ip6tables-save > \/etc\/iptables\/rules.v6<\/code><\/pre>\n
    netfilter-persistent<\/code> servisi, sistem ba\u015flang\u0131c\u0131nda \/etc\/iptables\/rules.v4<\/code> ve \/etc\/iptables\/rules.v6<\/code> dosyalar\u0131ndaki kurallar\u0131 otomatik olarak y\u00fckler.
\n*   CentOS\/RHEL tabanl\u0131 sistemlerde (iptables-services<\/code>):<\/strong><\/p>\n
sudo service iptables save\n    sudo service ip6tables save\n    # veya modern systemd komutlar\u0131 ile\n    sudo systemctl enable iptables\n    sudo systemctl enable ip6tables\n    sudo systemctl restart iptables\n    sudo systemctl restart ip6tables<\/code><\/pre>\n
    Bu komutlar, mevcut kurallar\u0131 \/etc\/sysconfig\/iptables<\/code> ve \/etc\/sysconfig\/ip6tables<\/code> dosyalar\u0131na kaydeder ve sistem ba\u015flang\u0131c\u0131nda bu kurallar\u0131 y\u00fckleyecek servisleri etkinle\u015ftirir.<\/p>\n
Kal\u0131c\u0131l\u0131\u011f\u0131 sa\u011flad\u0131ktan sonra, sunucuyu yeniden ba\u015flatarak kurallar\u0131n hala do\u011fru \u015fekilde y\u00fcklendi\u011finden emin olmak iyi bir uygulamad\u0131r. Ancak bu ad\u0131m\u0131 atmadan \u00f6nce t\u00fcm kontrolleri tekrar tekrar yapt\u0131\u011f\u0131n\u0131zdan emin olun.<\/p>\n
G\u00f6\u00e7 Sonras\u0131: Test ve \u0130zleme<\/h3>\n
Iptables kurallar\u0131n\u0131n yeni sunucuya ba\u015far\u0131yla ta\u015f\u0131nmas\u0131ndan sonra bile, s\u00fcrekli test ve izleme kritik \u00f6neme sahiptir.<\/p>\n
*   Kapsaml\u0131 Uygulama Testleri:<\/strong> Sadece portlar\u0131n a\u00e7\u0131k olup olmad\u0131\u011f\u0131n\u0131 de\u011fil, sunucuda \u00e7al\u0131\u015fan t\u00fcm uygulamalar\u0131n ve servislerin beklenen \u015fekilde \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 test edin. \u00d6zellikle karma\u015f\u0131k NAT veya \u00f6zel zincirler i\u00e7eren kurallar, uygulama davran\u0131\u015f\u0131n\u0131 etkileyebilir.
\n*   G\u00fcnl\u00fck \u0130zleme:<\/strong> Sunucunun g\u00fcvenlik duvar\u0131 g\u00fcnl\u00fcklerini d\u00fczenli olarak izleyin. dmesg<\/code>, \/var\/log\/syslog<\/code>, \/var\/log\/kern.log<\/code> gibi dosyalar\u0131 kontrol ederek Iptables taraf\u0131ndan engellenen veya \u015f\u00fcpheli g\u00f6r\u00fcnen trafi\u011fi tespit edin. fail2ban<\/code> gibi ara\u00e7lar, bu g\u00fcnl\u00fckleri otomatik olarak analiz ederek sald\u0131r\u0131lar\u0131 \u00f6nlemeye yard\u0131mc\u0131 olabilir.
\n*   Performans \u0130zleme:<\/strong> Iptables kurallar\u0131, \u00f6zellikle \u00e7ok say\u0131da ve karma\u015f\u0131k kural varsa, sunucu performans\u0131n\u0131 etkileyebilir. CPU kullan\u0131m\u0131, a\u011f bant geni\u015fli\u011fi ve genel sistem yan\u0131t s\u00fcresini izleyin.
\n*   D\u00fczenli G\u00fcvenlik Denetimleri:<\/strong> Ta\u015f\u0131ma sonras\u0131 g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 d\u00fczenli olarak g\u00f6zden ge\u00e7irin. Gereksiz a\u00e7\u0131k portlar\u0131 kapat\u0131n, eski kurallar\u0131 temizleyin ve g\u00fcvenlik en iyi uygulamalar\u0131na uygun oldu\u011fundan emin olun.<\/p>\n
S\u0131k Kar\u015f\u0131la\u015f\u0131lan Sorunlar ve Giderme<\/h3>\n
Iptables kurallar\u0131n\u0131 ta\u015f\u0131rken veya sonras\u0131nda kar\u015f\u0131la\u015f\u0131labilecek baz\u0131 yayg\u0131n sorunlar ve \u00e7\u00f6z\u00fcm \u00f6nerileri \u015funlard\u0131r:<\/p>\n
*   Sunucuya Eri\u015fim Kilitlenmesi (Locked Out):<\/strong>
\n    *   Belirti:<\/strong> SSH ba\u011flant\u0131s\u0131 kesildi, sunucuya hi\u00e7bir \u015fekilde eri\u015filemiyor.
\n    *   Neden:<\/strong> Yanl\u0131\u015f bir DROP<\/code> veya REJECT<\/code> kural\u0131, SSH portunu veya ilgili trafi\u011fi engelledi.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong>
\n        *   Bulut sa\u011flay\u0131c\u0131n\u0131z\u0131n y\u00f6netim panelinden konsol eri\u015fimini kullan\u0131n.
\n        *   Sunucuya fiziksel eri\u015fiminiz varsa do\u011frudan konsolu kullan\u0131n.
\n        *   E\u011fer ta\u015f\u0131ma s\u0131ras\u0131nda at<\/code> komutunu kulland\u0131ysan\u0131z, belirli bir s\u00fcre sonra kurallar temizlenecek ve eri\u015fiminiz geri gelecektir.
\n        *   Eri\u015fim sa\u011flad\u0131ktan sonra, sudo iptables -F<\/code> (t\u00fcm kurallar\u0131 temizle), sudo iptables -X<\/code> (t\u00fcm \u00f6zel zincirleri sil), sudo iptables -P INPUT ACCEPT<\/code> (varsay\u0131lan gelen politikay\u0131 kabul et) komutlar\u0131n\u0131 kullanarak g\u00fcvenlik duvar\u0131n\u0131 s\u0131f\u0131rlay\u0131n ve kurallar\u0131 dikkatlice yeniden y\u00fckleyin.
\n*   A\u011f Aray\u00fcz\u00fc Ad\u0131 Uyumsuzlu\u011fu:<\/strong>
\n    *   Belirti:<\/strong> Kurallar y\u00fcklendi ancak trafik ge\u00e7miyor, iptables -L -n -v<\/code> \u00e7\u0131kt\u0131s\u0131nda 0 B<\/code> veya 0 packets<\/code> g\u00f6r\u00fcnen kurallar var.
\n    *   Neden:<\/strong> Kural dosyas\u0131ndaki a\u011f aray\u00fcz\u00fc isimleri (\u00f6rne\u011fin eth0<\/code>), yeni sunucudaki ger\u00e7ek aray\u00fcz isimleriyle (\u00f6rne\u011fin ens33<\/code>) e\u015fle\u015fmiyor.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> Kural dosyalar\u0131n\u0131 (iptables_rules.v4<\/code>, ip6tables_rules.v6<\/code>) d\u00fczenleyerek eski aray\u00fcz isimlerini yenileriyle de\u011fi\u015ftirin (sed<\/code> komutu kullan\u0131labilir). Ard\u0131ndan kurallar\u0131 tekrar y\u00fckleyin.
\n*   Kernel Mod\u00fcl\u00fc Eksikli\u011fi:<\/strong>
\n    *   Belirti:<\/strong> iptables-restore<\/code> komutu hata veriyor veya belirli Iptables e\u015fle\u015fmeleri\/hedefleri \u00e7al\u0131\u015fm\u0131yor (\u00f6rne\u011fin xt_string<\/code> veya nf_conntrack_ftp<\/code>).
\n    *   Neden:<\/strong> \u0130lgili kernel mod\u00fcl\u00fc y\u00fckl\u00fc de\u011fil.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> Gerekli kernel mod\u00fcl\u00fcn\u00fc sudo modprobe <\/code> komutuyla y\u00fckleyin. Mod\u00fcllerin sistem ba\u015flang\u0131c\u0131nda y\u00fcklenmesi i\u00e7in \/etc\/modules-load.d\/<\/code> alt\u0131na bir .conf<\/code> dosyas\u0131 olu\u015fturabilirsiniz.
\n*   IPv6 Sorunlar\u0131:<\/strong>
\n    *   Belirti:<\/strong> IPv4 trafi\u011fi \u00e7al\u0131\u015f\u0131yor ancak IPv6 trafi\u011fi engelleniyor veya beklenmedik \u015fekilde davran\u0131yor.
\n    *   Neden:<\/strong> ip6tables<\/code> kurallar\u0131 do\u011fru y\u00fcklenmemi\u015f veya kal\u0131c\u0131 hale getirilmemi\u015f.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> ip6tables-restore<\/code> komutunun do\u011fru kullan\u0131ld\u0131\u011f\u0131ndan ve ip6tables<\/code> servisinin etkinle\u015ftirildi\u011finden emin olun. IPv6 kurallar\u0131n\u0131 da ip6tables -L -n -v<\/code> ile kontrol edin.
\n*   NAT Kurallar\u0131 \u00c7al\u0131\u015fm\u0131yor:<\/strong>
\n    *   Belirti:<\/strong> Port y\u00f6nlendirme veya d\u0131\u015far\u0131 \u00e7\u0131kan trafik maskeleme i\u015flemi ba\u015far\u0131s\u0131z oluyor.
\n    *   Neden:<\/strong> net.ipv4.ip_forward<\/code> \u00e7ekirdek parametresi etkin de\u011fil veya NAT kurallar\u0131 yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> sudo sysctl -w net.ipv4.ip_forward=1<\/code> komutuyla IP y\u00f6nlendirmeyi etkinle\u015ftirin. Kal\u0131c\u0131 hale getirmek i\u00e7in \/etc\/sysctl.conf<\/code> dosyas\u0131na net.ipv4.ip_forward = 1<\/code> ekleyin ve sudo sysctl -p<\/code> ile uygulay\u0131n. NAT tablosundaki kurallar\u0131 (sudo iptables -t nat -L -n -v<\/code>) dikkatlice inceleyin.
\n*   firewalld<\/code> ile \u00c7ak\u0131\u015fma (CentOS\/RHEL):<\/strong>
\n    *   Belirti:<\/strong> Iptables kurallar\u0131 y\u00fcklendi\u011fi halde etkili olmuyor veya sunucu yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda kayboluyor.
\n    *   Neden:<\/strong> firewalld<\/code> servisi aktif ve Iptables kurallar\u0131n\u0131 \u00fczerine yaz\u0131yor veya engelliyor.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> firewalld<\/code>'\u0131 durdurun ve devre d\u0131\u015f\u0131 b\u0131rak\u0131n (sudo systemctl stop firewalld && sudo systemctl disable firewalld<\/code>). Ard\u0131ndan iptables-services<\/code>'\u0131 kurun, etkinle\u015ftirin ve Iptables kurallar\u0131n\u0131 y\u00fckleyin.<\/p>\n
Geli\u015fmi\u015f Konular<\/h3>\n
*   Yap\u0131land\u0131rma Y\u00f6netimi Ara\u00e7lar\u0131:<\/strong> B\u00fcy\u00fck altyap\u0131larda veya s\u0131k s\u0131k de\u011fi\u015fiklik yap\u0131lan ortamlarda, Iptables kurallar\u0131n\u0131 manuel olarak y\u00f6netmek yerine Ansible, Puppet, Chef gibi yap\u0131land\u0131rma y\u00f6netimi ara\u00e7lar\u0131n\u0131 kullanmak daha verimlidir. Bu ara\u00e7lar, kural setlerini kod olarak tan\u0131mlaman\u0131za ve bir\u00e7ok sunucuya otomatik olarak da\u011f\u0131tman\u0131za olanak tan\u0131r.
\n*   nftables<\/code>'a Ge\u00e7i\u015f:<\/strong> Iptables, Linux'ta uzun s\u00fcredir standart olsa da, nftables<\/code> daha modern, esnek ve performansl\u0131 bir alternatiftir. Gelecekteki ta\u015f\u0131ma i\u015flemlerinde veya yeni kurulumlarda nftables<\/code>'a ge\u00e7i\u015f yapmay\u0131 d\u00fc\u015f\u00fcnebilirsiniz. nftables<\/code>, tek bir yap\u0131land\u0131rma dosyas\u0131 ve daha basit bir s\u00f6zdizimi sunar.
\n*   Otomatik Kural \u00dcretimi:<\/strong> Karma\u015f\u0131k g\u00fcvenlik duvar\u0131 ihtiya\u00e7lar\u0131 i\u00e7in, \u00f6zel betikler veya yaz\u0131l\u0131mlar kullanarak Iptables kurallar\u0131n\u0131 otomatik olarak \u00fcretebilirsiniz. Bu, insan hatas\u0131n\u0131 azalt\u0131r ve tutarl\u0131l\u0131\u011f\u0131 art\u0131r\u0131r.
\n*   G\u00fcvenlik En \u0130yi Uygulamalar\u0131:<\/strong>
\n    *   Varsay\u0131lan DROP Politikas\u0131:<\/strong> M\u00fcmk\u00fcnse, t\u00fcm zincirler i\u00e7in varsay\u0131lan politikay\u0131 DROP<\/code> olarak ayarlay\u0131n (iptables -P INPUT DROP<\/code>, iptables -P FORWARD DROP<\/code>). Bu, sadece a\u00e7\u0131k\u00e7a izin verilen trafi\u011fin ge\u00e7mesini sa\u011flar ve g\u00fcvenlik duru\u015funuzu g\u00fc\u00e7lendirir.
\n    *   En Az Ayr\u0131cal\u0131k Prensibi:<\/strong> Yaln\u0131zca kesinlikle gerekli olan portlar\u0131 ve protokolleri a\u00e7\u0131n.
\n    *   H\u0131z S\u0131n\u0131rlama (Rate Limiting):<\/strong> Brute-force sald\u0131r\u0131lar\u0131n\u0131 \u00f6nlemek i\u00e7in SSH gibi kritik servislere gelen ba\u011flant\u0131 denemelerini h\u0131z s\u0131n\u0131rlama kurallar\u0131yla k\u0131s\u0131tlay\u0131n.
\n    *   G\u00fcnl\u00fckleme:<\/strong> \u015e\u00fcpheli veya engellenen trafi\u011fi kaydetmek i\u00e7in LOG<\/code> hedefini kullan\u0131n.<\/p>\n
Sonu\u00e7<\/h3>\n
Iptables g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 yeni bir sunucuya ta\u015f\u0131mak, dikkatli planlama, eksiksiz yedekleme ve titiz do\u011frulama gerektiren teknik bir s\u00fcre\u00e7tir. Bu rehberde a\u00e7\u0131klanan ad\u0131mlar\u0131 takip ederek, sistem y\u00f6neticileri bu i\u015flemi g\u00fcvenli ve sorunsuz bir \u015fekilde ger\u00e7ekle\u015ftirebilirler.<\/p>\n
Unutulmamal\u0131d\u0131r ki, g\u00fcvenlik duvar\u0131 kurallar\u0131 bir sunucunun savunmas\u0131n\u0131n ilk hatt\u0131d\u0131r. Kurallar\u0131n do\u011fru bir \u015fekilde ta\u015f\u0131nmas\u0131 ve etkin bir \u015fekilde y\u00f6netilmesi, sunucunun s\u00fcrekli g\u00fcvenli\u011fini ve eri\u015filebilirli\u011fini sa\u011flamak i\u00e7in hayati \u00f6neme sahiptir. Ta\u015f\u0131ma \u00f6ncesi haz\u0131rl\u0131k, ad\u0131m ad\u0131m uygulama, kapsaml\u0131 testler ve s\u00fcrekli izleme, ba\u015far\u0131l\u0131 bir ge\u00e7i\u015fin anahtarlar\u0131d\u0131r. Herhangi bir sorunla kar\u015f\u0131la\u015f\u0131lmas\u0131 durumunda, geri alma plan\u0131n\u0131n haz\u0131r olmas\u0131 ve sorun giderme tekniklerinin bilinmesi, olas\u0131 kesintileri en aza indirecektir. Modern altyap\u0131larda Iptables'\u0131n yerini yava\u015f yava\u015f nftables<\/code> alsa da, Iptables hala yayg\u0131n olarak kullan\u0131lmakta ve temel g\u00fcvenlik duvar\u0131 y\u00f6netimi becerilerinin ayr\u0131lmaz bir par\u00e7as\u0131 olmaya devam etmektedir.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Iptables G\u00fcvenlik Duvar\u0131 Kurallar\u0131n\u0131 Yeni Sunucuya Ta\u015f\u0131ma Rehberi\nSunucular\u0131n g\u00fcvenli\u011fi, modern bilgi i\u015flem altyap\u0131lar\u0131n\u0131n en kritik uns","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-32533","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-genel","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nIptables G\u00fcvenlik Duvar\u0131 Kurallar\u0131n\u0131 Yeni Sunucuya Ta\u015f\u0131ma Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Iptables G\u00fcvenlik Duvar\u0131 Kurallar\u0131n\u0131 Yeni Sunucuya Ta\u015f\u0131ma Rehberi\" \/>\n<meta property=\"og:description\" content=\"Iptables G\u00fcvenlik Duvar\u0131 Kurallar\u0131n\u0131 Yeni Sunucuya Ta\u015f\u0131ma Rehberi Sunucular\u0131n g\u00fcvenli\u011fi, modern bilgi i\u015flem altyap\u0131lar\u0131n\u0131n en kritik uns\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-10-22T21:41:05+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"18 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Iptables G\u00fcvenlik Duvar\u0131 Kurallar\u0131n\u0131 Yeni Sunucuya Ta\u015f\u0131ma Rehberi\",\"datePublished\":\"2025-10-22T21:41:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/\"},\"wordCount\":3235,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/\",\"name\":\"Iptables G\u00fcvenlik Duvar\u0131 Kurallar\u0131n\u0131 Yeni Sunucuya Ta\u015f\u0131ma Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-10-22T21:41:05+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Iptables G\u00fcvenlik Duvar\u0131 Kurallar\u0131n\u0131 Yeni Sunucuya Ta\u015f\u0131ma Rehberi\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Iptables G\u00fcvenlik Duvar\u0131 Kurallar\u0131n\u0131 Yeni Sunucuya Ta\u015f\u0131ma Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/","og_locale":"tr_TR","og_type":"article","og_title":"Iptables G\u00fcvenlik Duvar\u0131 Kurallar\u0131n\u0131 Yeni Sunucuya Ta\u015f\u0131ma Rehberi","og_description":"Iptables G\u00fcvenlik Duvar\u0131 Kurallar\u0131n\u0131 Yeni Sunucuya Ta\u015f\u0131ma Rehberi Sunucular\u0131n g\u00fcvenli\u011fi, modern bilgi i\u015flem altyap\u0131lar\u0131n\u0131n en kritik uns","og_url":"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-10-22T21:41:05+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"18 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Iptables G\u00fcvenlik Duvar\u0131 Kurallar\u0131n\u0131 Yeni Sunucuya Ta\u015f\u0131ma Rehberi","datePublished":"2025-10-22T21:41:05+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/"},"wordCount":3235,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/","url":"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/","name":"Iptables G\u00fcvenlik Duvar\u0131 Kurallar\u0131n\u0131 Yeni Sunucuya Ta\u015f\u0131ma Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-10-22T21:41:05+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/iptables-guvenlik-duvari-kurallarini-yeni-sunucuya-tasima-rehberi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Iptables G\u00fcvenlik Duvar\u0131 Kurallar\u0131n\u0131 Yeni Sunucuya Ta\u015f\u0131ma Rehberi"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/32533","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=32533"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/32533\/revisions"}],"predecessor-version":[{"id":32534,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/32533\/revisions\/32534"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=32533"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=32533"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=32533"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}