{"id":35500,"date":"2025-11-30T11:40:51","date_gmt":"2025-11-30T08:40:51","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=35500"},"modified":"2025-11-30T11:40:51","modified_gmt":"2025-11-30T08:40:51","slug":"apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/","title":{"rendered":"Apache ve Ubuntu 18.04 Kullanarak Alan Ad\u0131n\u0131z \u0130\u00e7in MTA-STS ve TLS Raporlamas\u0131n\u0131 Yap\u0131land\u0131rma Rehberi"},"content":{"rendered":"<p><body><\/p>\n<h2>Apache ve Ubuntu 18.04 Kullanarak Alan Ad\u0131n\u0131z \u0130\u00e7in MTA-STS ve TLS Raporlamas\u0131n\u0131 Yap\u0131land\u0131rma Rehberi<\/h2>\n<h2>Giri\u015f<\/h2>\n<p>G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda e-posta, i\u015f ileti\u015fiminin ve ki\u015fisel etkile\u015fimin temel ta\u015flar\u0131ndan biridir. Ancak, e-postalar\u0131n g\u00fcvenli\u011fi, siber su\u00e7lular\u0131n ve k\u00f6t\u00fc niyetli akt\u00f6rlerin s\u00fcrekli hedefi olmaya devam etmektedir. E-posta trafi\u011fini hedef alan sald\u0131r\u0131lar, hassas bilgilerin ele ge\u00e7irilmesine, kimlik av\u0131 sald\u0131r\u0131lar\u0131na ve itibar kayb\u0131na yol a\u00e7abilir. Bu tehditlerle m\u00fccadele etmek i\u00e7in DMARC, SPF ve DKIM gibi protokoller uzun s\u00fcredir kullan\u0131lmaktad\u0131r. Ancak, bu protokoller bile e-posta sunucular\u0131 aras\u0131ndaki aktar\u0131m s\u0131ras\u0131nda ileti\u015fimin \u015fifrelenmesini garanti edemez. \u0130\u015fte tam bu noktada MTA-STS (Mail Transfer Agent Strict Transport Security) ve TLS Raporlama devreye girer.<\/p>\n<p>MTA-STS, e-posta sunucular\u0131 aras\u0131ndaki ileti\u015fimin her zaman \u015fifreli (TLS \u00fczerinden) ve kimli\u011fi do\u011frulanm\u0131\u015f bir \u015fekilde ger\u00e7ekle\u015fmesini sa\u011flamak amac\u0131yla geli\u015ftirilmi\u015f bir g\u00fcvenlik standard\u0131d\u0131r. Geleneksel olarak, STARTTLS komutu e-posta sunucular\u0131n\u0131n \u015fifreli bir ba\u011flant\u0131 kurmas\u0131n\u0131 sa\u011flar, ancak bu komut bir sald\u0131rgan taraf\u0131ndan engellenebilir (STARTTLS stripping) veya d\u00fc\u015f\u00fcr\u00fclebilir (downgrade attack), bu da ileti\u015fimin \u015fifresiz olarak devam etmesine neden olabilir. MTA-STS, bu t\u00fcr sald\u0131r\u0131lar\u0131 \u00f6nleyerek e-posta trafi\u011finin g\u00fcvenli\u011fini \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131r\u0131r. TLS Raporlama ise, MTA-STS politikalar\u0131n\u0131z\u0131n nas\u0131l uyguland\u0131\u011f\u0131na dair geri bildirim alman\u0131z\u0131 sa\u011flayarak, olas\u0131 yap\u0131land\u0131rma hatalar\u0131n\u0131 veya sald\u0131r\u0131 giri\u015fimlerini tespit etmenize yard\u0131mc\u0131 olur.<\/p>\n<p>Bu makalede, bir Ubuntu 18.04 sunucusu \u00fczerinde Apache web sunucusunu kullanarak alan ad\u0131n\u0131z i\u00e7in MTA-STS ve TLS Raporlamas\u0131n\u0131 ad\u0131m ad\u0131m nas\u0131l yap\u0131land\u0131raca\u011f\u0131n\u0131z\u0131 detayl\u0131 bir \u015fekilde a\u00e7\u0131klayaca\u011f\u0131z. Bu rehber, sistem y\u00f6neticileri ve e-posta g\u00fcvenli\u011fi konusunda bilgi sahibi olmak isteyen herkes i\u00e7in faydal\u0131 olacakt\u0131r.<\/p>\n<h2>MTA-STS Nedir ve Neden \u00d6nemlidir?<\/h2>\n<p>MTA-STS, e-posta aktar\u0131m arac\u0131lar\u0131 (MTA&#8217;lar) aras\u0131nda g\u00fcvenli ve \u015fifreli ileti\u015fimi zorunlu k\u0131lan bir internet standard\u0131d\u0131r. Temel amac\u0131, e-posta sunucular\u0131 aras\u0131ndaki ba\u011flant\u0131lar\u0131n her zaman TLS (Transport Layer Security) kullan\u0131larak \u015fifrelenmesini ve kimlik do\u011frulamas\u0131n\u0131n yap\u0131lmas\u0131n\u0131 sa\u011flamakt\u0131r.<\/p>\n<p>MTA-STS&#8217;nin \u00e7\u00f6zd\u00fc\u011f\u00fc temel sorun, STARTTLS stripping ve pasif downgrade sald\u0131r\u0131lar\u0131d\u0131r. Bir e-posta sunucusu (g\u00f6nderen MTA), ba\u015fka bir e-posta sunucusuna (al\u0131c\u0131 MTA) ba\u011flanmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131nda, genellikle \u00f6nce \u015fifresiz bir ba\u011flant\u0131 kurar ve ard\u0131ndan STARTTLS komutunu kullanarak ba\u011flant\u0131y\u0131 \u015fifreli hale getirmeye \u00e7al\u0131\u015f\u0131r. Ancak, bir sald\u0131rgan bu STARTTLS komutunu araya girerek engelleyebilir veya ba\u011flant\u0131y\u0131 \u015fifresiz olarak devam etmeye zorlayabilir. Bu durumda, e-postan\u0131n i\u00e7eri\u011fi sald\u0131rgan taraf\u0131ndan okunabilir veya de\u011fi\u015ftirilebilir hale gelir.<\/p>\n<p>MTA-STS, bu senaryoyu \u00f6nlemek i\u00e7in iki ana bile\u015fen kullan\u0131r:<br \/>\n1.  <strong>DNS TXT Kayd\u0131:<\/strong> Alan ad\u0131n\u0131n DNS kay\u0131tlar\u0131nda <code>_mta-sts<\/code> alt alan ad\u0131 i\u00e7in bir TXT kayd\u0131 bulunur. Bu kay\u0131t, al\u0131c\u0131 MTA&#8217;n\u0131n MTA-STS politikas\u0131na sahip oldu\u011funu ve politikan\u0131n nerede bulunaca\u011f\u0131n\u0131 belirtir.<br \/>\n2.  <strong>HTTPS \u00dczerinden Sunulan Politika Dosyas\u0131:<\/strong> Politika dosyas\u0131, <code>mta-sts.yourdomain.com<\/code> gibi belirli bir alt alan ad\u0131nda, HTTPS \u00fczerinden g\u00fcvenli bir \u015fekilde sunulur. Bu dosya, alan ad\u0131n\u0131n e-posta sunucular\u0131n\u0131n (MX kay\u0131tlar\u0131) hangi TLS g\u00fcvenlik seviyesini gerektirdi\u011fini ve politikan\u0131n ne kadar s\u00fcreyle ge\u00e7erli oldu\u011funu belirtir.<\/p>\n<p>Bir g\u00f6nderen MTA, bir alan ad\u0131na e-posta g\u00f6ndermeden \u00f6nce \u015fu ad\u0131mlar\u0131 izler:<br \/>\n1.  Al\u0131c\u0131n\u0131n alan ad\u0131n\u0131n <code>_mta-sts<\/code> TXT kayd\u0131n\u0131 sorgular.<br \/>\n2.  TXT kayd\u0131 varsa, <code>mta-sts.yourdomain.com<\/code> adresinden HTTPS \u00fczerinden MTA-STS politika dosyas\u0131n\u0131 indirir. Bu dosyan\u0131n HTTPS \u00fczerinden sunulmas\u0131 kritik \u00f6neme sahiptir, \u00e7\u00fcnk\u00fc bu, politikan\u0131n b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc ve kimli\u011fini do\u011frular.<br \/>\n3.  Politika dosyas\u0131n\u0131 analiz eder ve belirtilen MX kay\u0131tlar\u0131 i\u00e7in TLS ba\u011flant\u0131s\u0131n\u0131n zorunlu oldu\u011funu anlar.<br \/>\n4.  E-postay\u0131 g\u00f6nderirken, al\u0131c\u0131 MX sunucular\u0131yla TLS ba\u011flant\u0131s\u0131 kurmaya \u00e7al\u0131\u015f\u0131r. E\u011fer TLS ba\u011flant\u0131s\u0131 kurulam\u0131yorsa veya sertifika do\u011frulanam\u0131yorsa, e-postay\u0131 g\u00f6ndermeyi reddeder (politikan\u0131n <code>mode<\/code> de\u011ferine ba\u011fl\u0131 olarak).<\/p>\n<p>Bu mekanizma sayesinde, e-posta trafi\u011fi her zaman \u015fifreli ve g\u00fcvenli bir kanal \u00fczerinden iletilir, bu da ortadaki adam (man-in-the-middle) sald\u0131r\u0131lar\u0131na kar\u015f\u0131 \u00f6nemli bir koruma sa\u011flar.<\/p>\n<h2>TLS Raporlama Nedir ve Neden \u00d6nemlidir?<\/h2>\n<p>TLS Raporlama (TLSRPT), MTA-STS ile birlikte \u00e7al\u0131\u015fan tamamlay\u0131c\u0131 bir protokold\u00fcr. Amac\u0131, MTA-STS politikalar\u0131n\u0131z\u0131n nas\u0131l uyguland\u0131\u011f\u0131na dair geri bildirim alman\u0131z\u0131 sa\u011flamakt\u0131r. Ba\u015fka bir deyi\u015fle, e-posta g\u00f6nderen sunucular\u0131n, sizin alan ad\u0131n\u0131za e-posta g\u00f6nderirken kar\u015f\u0131la\u015ft\u0131klar\u0131 TLS ba\u011flant\u0131 sorunlar\u0131n\u0131 (veya ba\u015far\u0131lar\u0131n\u0131) size raporlamas\u0131n\u0131 sa\u011flar.<\/p>\n<p>TLS Raporlama, a\u015fa\u011f\u0131daki nedenlerden dolay\u0131 kritik \u00f6neme sahiptir:<br \/>\n*   <strong>\u0130zleme ve Hata Ay\u0131klama:<\/strong> MTA-STS politikan\u0131z\u0131 <code>testing<\/code> modunda ba\u015flatt\u0131\u011f\u0131n\u0131zda, raporlar size olas\u0131 yap\u0131land\u0131rma hatalar\u0131n\u0131 veya eksiklikleri g\u00f6sterir. \u00d6rne\u011fin, MX kay\u0131tlar\u0131n\u0131zda bir hata varsa veya sertifikalar\u0131n\u0131zda bir sorun varsa, raporlar size bu durumu bildirecektir.<br \/>\n*   <strong>Sald\u0131r\u0131 Tespiti:<\/strong> E\u011fer bir sald\u0131rgan STARTTLS stripping veya downgrade sald\u0131r\u0131s\u0131 yapmaya \u00e7al\u0131\u015f\u0131yorsa, raporlar size ba\u015far\u0131s\u0131z TLS ba\u011flant\u0131 giri\u015fimlerini g\u00f6sterebilir. Bu, potansiyel g\u00fcvenlik ihlallerini erken tespit etmenizi sa\u011flar.<br \/>\n*   <strong>Politika Do\u011frulama:<\/strong> <code>enforce<\/code> moduna ge\u00e7meden \u00f6nce, TLS Raporlar\u0131 sayesinde politikan\u0131z\u0131n do\u011fru \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan ve me\u015fru e-postalar\u0131n engellenmedi\u011finden emin olabilirsiniz.<br \/>\n*   <strong>Uyumluluk Sa\u011flama:<\/strong> Kurumsal uyumluluk gereksinimleri i\u00e7in, e-posta g\u00fcvenli\u011finizin s\u00fcrekli olarak denetlendi\u011fini ve raporland\u0131\u011f\u0131n\u0131 g\u00f6stermeniz gerekebilir.<\/p>\n<p>TLS Raporlama, alan ad\u0131n\u0131z\u0131n DNS kay\u0131tlar\u0131nda <code>_smtp._tls<\/code> alt alan ad\u0131 i\u00e7in bir TXT kayd\u0131 ile yap\u0131land\u0131r\u0131l\u0131r. Bu kay\u0131t, raporlar\u0131n hangi e-posta adresine g\u00f6nderilece\u011fini belirtir. G\u00f6nderen MTA&#8217;lar, belirli aral\u0131klarla (genellikle g\u00fcnl\u00fck) bu adrese JSON format\u0131nda raporlar g\u00f6nderir. Bu raporlar, ba\u011flant\u0131 denemeleri, ba\u015far\u0131l\u0131 ve ba\u015far\u0131s\u0131z ba\u011flant\u0131 say\u0131lar\u0131, TLS s\u00fcr\u00fcmleri, sertifika hatalar\u0131 gibi bilgileri i\u00e7erir. Bu raporlar\u0131 analiz ederek e-posta g\u00fcvenli\u011finizin durumunu s\u00fcrekli olarak izleyebilirsiniz.<\/p>\n<h2>\u00d6n Gereksinimler<\/h2>\n<p>Bu rehberi takip edebilmek i\u00e7in a\u015fa\u011f\u0131daki \u00f6n gereksinimlere sahip olman\u0131z gerekmektedir:<br \/>\n*   <strong>Ubuntu 18.04 LTS y\u00fckl\u00fc bir sunucu:<\/strong> Makaledeki komutlar ve yap\u0131land\u0131rmalar bu i\u015fletim sistemi s\u00fcr\u00fcm\u00fcne g\u00f6re optimize edilmi\u015ftir.<br \/>\n*   <strong>Apache web sunucusu kurulu ve \u00e7al\u0131\u015f\u0131r durumda:<\/strong> MTA-STS politika dosyas\u0131n\u0131 HTTPS \u00fczerinden sunmak i\u00e7in Apache&#8217;ye ihtiyac\u0131m\u0131z olacak.<br \/>\n*   <strong>Alan ad\u0131n\u0131za ait bir SSL\/TLS sertifikas\u0131:<\/strong> <code>mta-sts.yourdomain.com<\/code> alt alan ad\u0131 i\u00e7in ge\u00e7erli bir sertifikaya sahip olman\u0131z gerekmektedir. Let&#8217;s Encrypt, \u00fccretsiz ve otomatikle\u015ftirilmi\u015f sertifikalar sa\u011flad\u0131\u011f\u0131 i\u00e7in \u015fiddetle tavsiye edilir.<br \/>\n*   <strong>Alan ad\u0131n\u0131z\u0131n DNS kay\u0131tlar\u0131na eri\u015fim yetkisi:<\/strong> MTA-STS ve TLS Raporlama i\u00e7in DNS TXT kay\u0131tlar\u0131 olu\u015fturman\u0131z gerekecektir.<br \/>\n*   <strong>Temel Linux komut sat\u0131r\u0131 ve Apache bilgisi:<\/strong> Komutlar\u0131 anlama ve temel yap\u0131land\u0131rma dosyalar\u0131n\u0131 d\u00fczenleme yetene\u011fi.<br \/>\n*   <strong>Y\u00f6netici (sudo) ayr\u0131cal\u0131klar\u0131na sahip bir kullan\u0131c\u0131 hesab\u0131:<\/strong> Sunucu \u00fczerinde gerekli de\u011fi\u015fiklikleri yapabilmek i\u00e7in.<br \/>\n*   (\u0130ste\u011fe Ba\u011fl\u0131 ama \u00d6nerilen) DMARC, SPF ve DKIM yap\u0131land\u0131rmas\u0131: MTA-STS bu protokollere ek bir g\u00fcvenlik katman\u0131 sa\u011flar ve mevcut e-posta g\u00fcvenli\u011fi altyap\u0131n\u0131zla birlikte \u00e7al\u0131\u015f\u0131r.<\/p>\n<h2>Ad\u0131m 1: Apache Web Sunucusunu Haz\u0131rlama<\/h2>\n<p>MTA-STS politika dosyas\u0131n\u0131n HTTPS \u00fczerinden sunulmas\u0131 gerekti\u011fi i\u00e7in, \u00f6ncelikle Apache web sunucunuzu do\u011fru \u015fekilde yap\u0131land\u0131rman\u0131z gerekmektedir.<\/p>\n<h3>Apache Kurulumu ve Temel Yap\u0131land\u0131rma<\/h3>\n<p>E\u011fer sunucunuzda Apache kurulu de\u011filse, a\u015fa\u011f\u0131daki komutlarla kurabilirsiniz:<\/p>\n<pre><code class=\"language-bash\">sudo apt update\nsudo apt upgrade\nsudo apt install apache2<\/code><\/pre>\n<p>Apache kurulduktan sonra, g\u00fcvenlik duvar\u0131n\u0131z\u0131 (UFW) yap\u0131land\u0131rarak HTTP (80) ve HTTPS (443) trafi\u011fine izin vermeniz gerekmektedir:<\/p>\n<pre><code class=\"language-bash\">sudo ufw app list\nsudo ufw allow 'Apache Full'\nsudo ufw enable # E\u011fer UFW etkin de\u011filse<\/code><\/pre>\n<p>Apache servisinin \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in:<\/p>\n<pre><code class=\"language-bash\">sudo systemctl status apache2<\/code><\/pre>\n<p>Taray\u0131c\u0131n\u0131zda sunucunuzun IP adresini ziyaret ederek Apache&#8217;nin varsay\u0131lan ho\u015f geldiniz sayfas\u0131n\u0131 g\u00f6rmeniz gerekir.<\/p>\n<h3>SSL\/TLS Sertifikas\u0131 Kurulumu (Let&#8217;s Encrypt ile)<\/h3>\n<p>MTA-STS politika dosyas\u0131n\u0131 <code>mta-sts.yourdomain.com<\/code> adresinden HTTPS \u00fczerinden sunaca\u011f\u0131m\u0131z i\u00e7in, bu alt alan ad\u0131 i\u00e7in ge\u00e7erli bir SSL\/TLS sertifikas\u0131na ihtiyac\u0131m\u0131z var. Let&#8217;s Encrypt, Certbot arac\u0131 ile bu s\u00fcreci olduk\u00e7a basitle\u015ftirir.<\/p>\n<p>\u00d6ncelikle Certbot&#8217;u ve Apache eklentisini kurun:<\/p>\n<pre><code class=\"language-bash\">sudo apt install certbot python-certbot-apache<\/code><\/pre>\n<p>Ard\u0131ndan, <code>mta-sts.yourdomain.com<\/code> alt alan ad\u0131n\u0131z i\u00e7in bir sertifika al\u0131n. Bu ad\u0131m i\u00e7in, <code>mta-sts.yourdomain.com<\/code> adresinin sunucunuzun IP adresine i\u015faret eden bir DNS A kayd\u0131na sahip olmas\u0131 gerekmektedir.<\/p>\n<pre><code class=\"language-bash\">sudo certbot --apache -d mta-sts.yourdomain.com<\/code><\/pre>\n<p>Certbot size e-posta adresi, hizmet \u015fartlar\u0131n\u0131 kabul etme ve sertifika yenileme tercihleri gibi birka\u00e7 soru soracakt\u0131r. Sorular\u0131 yan\u0131tlad\u0131ktan sonra, Certbot otomatik olarak sertifikay\u0131 alacak, Apache sanal host yap\u0131land\u0131rman\u0131z\u0131 g\u00fcncelleyecek ve HTTPS&#8217;yi etkinle\u015ftirecektir.<\/p>\n<p>E\u011fer Certbot, <code>mta-sts.yourdomain.com<\/code> i\u00e7in ayr\u0131 bir sanal host dosyas\u0131 olu\u015fturmad\u0131ysa veya mevcut bir dosyay\u0131 g\u00fcncellemediyse, bunu daha sonra manuel olarak yapmam\u0131z gerekecektir. Ancak genellikle otomatik olarak halleder.<\/p>\n<p>Sertifikan\u0131n ba\u015far\u0131yla al\u0131nd\u0131\u011f\u0131n\u0131 ve Apache&#8217;nin yeniden y\u00fcklendi\u011fini do\u011frulay\u0131n.<\/p>\n<h2>Ad\u0131m 2: MTA-STS Politikas\u0131 Dosyas\u0131n\u0131 Olu\u015fturma<\/h2>\n<p>MTA-STS politika dosyas\u0131, alan ad\u0131n\u0131z\u0131n e-posta sunucular\u0131 i\u00e7in TLS gereksinimlerini tan\u0131mlayan basit bir metin dosyas\u0131d\u0131r. Bu dosya, <code>\/.well-known\/mta-sts\/mta-sts.txt<\/code> yolunda sunulmal\u0131d\u0131r.<\/p>\n<h3>Dizin Yap\u0131s\u0131n\u0131 Haz\u0131rlama<\/h3>\n<p>\u00d6ncelikle, politika dosyas\u0131n\u0131 bar\u0131nd\u0131racak dizin yap\u0131s\u0131n\u0131 olu\u015fturman\u0131z gerekmektedir. Varsay\u0131lan Apache <code>DocumentRoot<\/code>&#8216;unuz <code>\/var\/www\/html<\/code> ise, bu dizini kullanabilirsiniz. E\u011fer alan ad\u0131n\u0131z i\u00e7in \u00f6zel bir <code>DocumentRoot<\/code>&#8216;unuz varsa, o yolu kullan\u0131n. Bu \u00f6rnekte, <code>yourdomain.com<\/code> i\u00e7in <code>\/var\/www\/yourdomain.com\/public_html<\/code> kulland\u0131\u011f\u0131m\u0131z\u0131 varsayal\u0131m.<\/p>\n<pre><code class=\"language-bash\">sudo mkdir -p \/var\/www\/yourdomain.com\/public_html\/.well-known\/mta-sts\/<\/code><\/pre>\n<p>Dizin izinlerinin web sunucusu kullan\u0131c\u0131s\u0131 (genellikle <code>www-data<\/code>) taraf\u0131ndan eri\u015filebilir oldu\u011fundan emin olun:<\/p>\n<pre><code class=\"language-bash\">sudo chown -R www-data:www-data \/var\/www\/yourdomain.com\/public_html\nsudo chmod -R 755 \/var\/www\/yourdomain.com\/public_html<\/code><\/pre>\n<h3>Politika Dosyas\u0131n\u0131 Yazma<\/h3>\n<p>\u015eimdi <code>mta-sts.txt<\/code> dosyas\u0131n\u0131 olu\u015fturup i\u00e7eri\u011fini yazal\u0131m:<\/p>\n<pre><code class=\"language-bash\">sudo nano \/var\/www\/yourdomain.com\/public_html\/.well-known\/mta-sts\/mta-sts.txt<\/code><\/pre>\n<p>Dosyan\u0131n i\u00e7ine a\u015fa\u011f\u0131daki i\u00e7eri\u011fi yap\u0131\u015ft\u0131r\u0131n ve kendi alan ad\u0131n\u0131za g\u00f6re d\u00fczenleyin:<\/p>\n<pre><code class=\"language-\">version: STSv1\nmode: testing\nmx: mail.yourdomain.com\nmx: *.yourdomain.com\nmax_age: 86400<\/code><\/pre>\n<p>Bu dosyan\u0131n i\u00e7eri\u011fini a\u00e7\u0131klayal\u0131m:<br \/>\n*   <code>version: STSv1<\/code>: Politika dosyas\u0131n\u0131n s\u00fcr\u00fcm\u00fcn\u00fc belirtir. \u015eu anda sadece STSv1 mevcuttur.<br \/>\n*   <code>mode: testing<\/code>: Politikan\u0131n uygulama modunu belirtir.<br \/>\n    *   <code>testing<\/code>: Politika ihlalleri raporlan\u0131r ancak e-postalar yine de teslim edilir (STARTTLS stripping olsa bile). Bu mod, yap\u0131land\u0131rman\u0131z\u0131 test etmek i\u00e7in kritik \u00f6neme sahiptir.<br \/>\n    *   <code>enforce<\/code>: Politika ihlalleri durumunda e-postalar teslim edilmez ve raporlan\u0131r. Bu, tam koruma sa\u011flar.<br \/>\n    *   <code>none<\/code>: MTA-STS devre d\u0131\u015f\u0131 b\u0131rak\u0131l\u0131r.<br \/>\n    <strong>\u00d6nemli:<\/strong> Her zaman <code>testing<\/code> moduyla ba\u015flay\u0131n ve raporlar\u0131 inceledikten sonra <code>enforce<\/code> moduna ge\u00e7in.<br \/>\n<em>   <code>mx: mail.yourdomain.com<\/code>: Alan ad\u0131n\u0131z\u0131n MX kay\u0131tlar\u0131n\u0131 listeler. Buradaki de\u011ferler, alan ad\u0131n\u0131z\u0131n DNS MX kay\u0131tlar\u0131ndaki de\u011ferlerle tam olarak e\u015fle\u015fmelidir. Birden fazla MX kayd\u0131n\u0131z varsa, her birini ayr\u0131 bir <code>mx:<\/code> sat\u0131r\u0131 olarak ekleyin. \u00d6rne\u011fin, <code>mx: mail.yourdomain.com<\/code> ve <code>mx: mail2.yourdomain.com<\/code>. Wildcard (<code><\/em>.yourdomain.com<\/code>) kullan\u0131m\u0131, t\u00fcm alt alan adlar\u0131n\u0131 kapsayan MX kay\u0131tlar\u0131 i\u00e7in faydal\u0131 olabilir, ancak genellikle spesifik MX kay\u0131tlar\u0131 tercih edilir. <strong>Bu k\u0131s\u0131m \u00e7ok \u00f6nemlidir ve do\u011fru MX kay\u0131tlar\u0131n\u0131 belirtmezseniz e-posta ak\u0131\u015f\u0131n\u0131zda kesintiler ya\u015fanabilir.<\/strong><br \/>\n*   <code>max_age: 86400<\/code>: Politikan\u0131n saniye cinsinden ge\u00e7erlilik s\u00fcresini belirtir. Bu \u00f6rnekte 86400 saniye = 24 saat. Genellikle ilk ba\u015fta k\u0131sa bir s\u00fcre (\u00f6rne\u011fin 86400) kullanmak ve her \u015feyin yolunda gitti\u011finden emin olduktan sonra daha uzun bir s\u00fcreye (\u00f6rne\u011fin 604800 saniye = 7 g\u00fcn veya 2592000 saniye = 30 g\u00fcn) y\u00fckseltmek iyi bir uygulamad\u0131r. Bu s\u00fcre boyunca, g\u00f6nderen MTA&#8217;lar politikay\u0131 \u00f6nbelle\u011fe al\u0131r.<\/p>\n<p>Dosyay\u0131 kaydedin ve kapat\u0131n (<code>Ctrl+O<\/code>, <code>Enter<\/code>, <code>Ctrl+X<\/code>).<\/p>\n<h2>Ad\u0131m 3: Apache Sanal Host Yap\u0131land\u0131rmas\u0131<\/h2>\n<p>Certbot genellikle sertifikay\u0131 al\u0131rken <code>mta-sts.yourdomain.com<\/code> i\u00e7in bir sanal host yap\u0131land\u0131rmas\u0131 olu\u015fturur veya g\u00fcnceller. Ancak, politika dosyas\u0131n\u0131n do\u011fru <code>Content-Type<\/code> ba\u015fl\u0131\u011f\u0131yla sunuldu\u011fundan emin olmak i\u00e7in bu yap\u0131land\u0131rmay\u0131 kontrol etmemiz ve gerekirse d\u00fczenlememiz gerekebilir.<\/p>\n<h3>Yeni Bir Sanal Host Dosyas\u0131 Olu\u015fturma veya Mevcut Olan\u0131 D\u00fczenleme<\/h3>\n<p>Certbot&#8217;un olu\u015fturdu\u011fu sanal host dosyas\u0131 genellikle <code>\/etc\/apache2\/sites-available\/mta-sts.yourdomain.com-le-ssl.conf<\/code> yolunda bulunur. Bu dosyay\u0131 d\u00fczenleyin:<\/p>\n<pre><code class=\"language-bash\">sudo nano \/etc\/apache2\/sites-available\/mta-sts.yourdomain.com-le-ssl.conf<\/code><\/pre>\n<p>Dosyan\u0131n i\u00e7eri\u011fi a\u015fa\u011f\u0131daki gibi olmal\u0131d\u0131r (Certbot&#8217;un ekledi\u011fi SSL ile ilgili sat\u0131rlarla birlikte):<\/p>\n<pre><code class=\"language-apache\"><IfModule mod_ssl.c>\n<VirtualHost *:443>\n    ServerName mta-sts.yourdomain.com\n    DocumentRoot \/var\/www\/yourdomain.com\/public_html\n\n    <Directory \/var\/www\/yourdomain.com\/public_html\/.well-known\/mta-sts>\n        Require all granted\n        # MTA-STS politika dosyas\u0131n\u0131n Content-Type'\u0131n\u0131 metin olarak ayarlay\u0131n\n        <Files \"mta-sts.txt\">\n            Header set Content-Type \"text\/plain\"\n        <\/Files>\n    <\/Directory>\n\n    # Certbot taraf\u0131ndan eklenen SSL\/TLS yap\u0131land\u0131rmas\u0131\n    SSLCertificateFile \/etc\/letsencrypt\/live\/mta-sts.yourdomain.com\/fullchain.pem\n    SSLCertificateKeyFile \/etc\/letsencrypt\/live\/mta-sts.yourdomain.com\/privkey.pem\n    Include \/etc\/letsencrypt\/options-ssl-apache.conf\n    # Di\u011fer Certbot sat\u0131rlar\u0131...\n<\/VirtualHost>\n<\/IfModule><\/code><\/pre>\n<p><strong>\u00d6nemli Not:<\/strong> <code>DocumentRoot<\/code> yolunun ve <code>ServerName<\/code> de\u011ferinin kendi yap\u0131land\u0131rman\u0131za uygun oldu\u011fundan emin olun. <code><Directory><\/code> blo\u011fu, <code>mta-sts.txt<\/code> dosyas\u0131n\u0131n do\u011fru <code>Content-Type<\/code> ba\u015fl\u0131\u011f\u0131yla sunulmas\u0131n\u0131 sa\u011flar. Bu ba\u015fl\u0131k, dosyan\u0131n d\u00fcz metin olarak yorumlanmas\u0131 i\u00e7in kritik \u00f6neme sahiptir. E\u011fer <code>mod_headers<\/code> mod\u00fcl\u00fc etkin de\u011filse, etkinle\u015ftirmeniz gerekir:<\/p>\n<pre><code class=\"language-bash\">sudo a2enmod headers<\/code><\/pre>\n<p>Dosyay\u0131 kaydedin ve kapat\u0131n.<\/p>\n<h3>Sanal Host&#8217;u Etkinle\u015ftirme ve Apache&#8217;yi Yeniden Y\u00fckleme<\/h3>\n<p>E\u011fer Certbot zaten etkinle\u015ftirmediyse, sanal host dosyas\u0131n\u0131 etkinle\u015ftirin:<\/p>\n<pre><code class=\"language-bash\">sudo a2ensite mta-sts.yourdomain.com-le-ssl.conf<\/code><\/pre>\n<p>Apache yap\u0131land\u0131rman\u0131zda herhangi bir hata olup olmad\u0131\u011f\u0131n\u0131 kontrol edin:<\/p>\n<pre><code class=\"language-bash\">sudo apache2ctl configtest<\/code><\/pre>\n<p><code>Syntax OK<\/code> \u00e7\u0131kt\u0131s\u0131n\u0131 al\u0131rsan\u0131z, Apache&#8217;yi yeniden y\u00fckleyebilirsiniz:<\/p>\n<pre><code class=\"language-bash\">sudo systemctl reload apache2<\/code><\/pre>\n<h3>Politika Dosyas\u0131n\u0131n Eri\u015filebilirli\u011fini Test Etme<\/h3>\n<p>Politika dosyas\u0131n\u0131n HTTPS \u00fczerinden do\u011fru bir \u015fekilde sunulup sunulmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in <code>curl<\/code> kullanabilirsiniz:<\/p>\n<pre><code class=\"language-bash\">curl -v https:\/\/mta-sts.yourdomain.com\/.well-known\/mta-sts\/mta-sts.txt<\/code><\/pre>\n<p>\u00c7\u0131kt\u0131da HTTP 200 OK durum kodunu ve <code>Content-Type: text\/plain<\/code> ba\u015fl\u0131\u011f\u0131n\u0131 g\u00f6rmelisiniz. Ayr\u0131ca, <code>mta-sts.txt<\/code> dosyas\u0131n\u0131n i\u00e7eri\u011fi de g\u00f6sterilmelidir. E\u011fer bir hata (\u00f6rne\u011fin 404 Not Found) al\u0131yorsan\u0131z, <code>DocumentRoot<\/code> yolunuzu, dizin izinlerini veya Apache sanal host yap\u0131land\u0131rman\u0131z\u0131 kontrol edin.<\/p>\n<h2>Ad\u0131m 4: DNS Kay\u0131tlar\u0131n\u0131 Yap\u0131land\u0131rma<\/h2>\n<p>MTA-STS ve TLS Raporlaman\u0131n \u00e7al\u0131\u015fmas\u0131 i\u00e7in DNS kay\u0131tlar\u0131n\u0131za iki adet TXT kayd\u0131 eklemeniz gerekmektedir. Bu kay\u0131tlar\u0131, alan ad\u0131n\u0131z\u0131n DNS y\u00f6netim panelinden (alan ad\u0131 sa\u011flay\u0131c\u0131n\u0131z veya DNS bar\u0131nd\u0131r\u0131c\u0131n\u0131z) eklemeniz gerekecektir.<\/p>\n<h3>MTA-STS TXT Kayd\u0131<\/h3>\n<p><code>_mta-sts.yourdomain.com<\/code> alt alan ad\u0131 i\u00e7in bir TXT kayd\u0131 olu\u015fturman\u0131z gerekmektedir. Bu kay\u0131t, di\u011fer e-posta sunucular\u0131na alan ad\u0131n\u0131z i\u00e7in bir MTA-STS politikas\u0131n\u0131n mevcut oldu\u011funu bildirir.<\/p>\n<p>*   <strong>Host\/Ad\/\u0130sim:<\/strong> <code>_mta-sts.yourdomain.com<\/code> (Baz\u0131 DNS sa\u011flay\u0131c\u0131lar\u0131 sadece <code>_mta-sts<\/code> yazman\u0131z\u0131 isteyebilir, <code>yourdomain.com<\/code> otomatik olarak eklenir.)<br \/>\n*   <strong>De\u011fer\/Metin:<\/strong> <code>v=STSv1; id=20231027100000;<\/code><\/p>\n<p><strong><code>id<\/code> alan\u0131 \u00e7ok \u00f6nemlidir:<\/strong> Bu, politikan\u0131z\u0131n bir s\u00fcr\u00fcm kimli\u011fidir. Politika dosyan\u0131zda (<code>mta-sts.txt<\/code>) herhangi bir de\u011fi\u015fiklik yapt\u0131\u011f\u0131n\u0131zda (\u00f6rne\u011fin <code>mode<\/code>&#8216;u <code>testing<\/code>&#8216;den <code>enforce<\/code>&#8216;a de\u011fi\u015ftirdi\u011finizde veya <code>max_age<\/code>&#8216;i g\u00fcncelledi\u011finizde), bu <code>id<\/code> de\u011ferini de g\u00fcncellemeniz gerekmektedir. Genellikle YYYYMMDDHHMMSS format\u0131nda bir tarih ve saat damgas\u0131 kullanmak iyi bir uygulamad\u0131r (\u00f6rne\u011fin <code>20231027100000<\/code> 27 Ekim 2023, saat 10:00:00 anlam\u0131na gelir). G\u00f6nderen MTA&#8217;lar, bu <code>id<\/code> de\u011ferini kontrol ederek politikan\u0131z\u0131n de\u011fi\u015fip de\u011fi\u015fmedi\u011fini anlar ve yeni politikay\u0131 tekrar indirir.<\/p>\n<h3>TLS Raporlama TXT Kayd\u0131<\/h3>\n<p><code>_smtp._tls.yourdomain.com<\/code> alt alan ad\u0131 i\u00e7in bir TXT kayd\u0131 olu\u015fturman\u0131z gerekmektedir. Bu kay\u0131t, raporlar\u0131n hangi e-posta adresine g\u00f6nderilece\u011fini belirtir.<\/p>\n<p>*   <strong>Host\/Ad\/\u0130sim:<\/strong> <code>_smtp._tls.yourdomain.com<\/code> (Baz\u0131 DNS sa\u011flay\u0131c\u0131lar\u0131 sadece <code>_smtp._tls<\/code> yazman\u0131z\u0131 isteyebilir.)<br \/>\n*   <strong>De\u011fer\/Metin:<\/strong> <code>v=TLSRPTv1; rua=mailto:rapor@yourdomain.com;<\/code><\/p>\n<p><strong><code>rua<\/code> alan\u0131:<\/strong> Bu, TLS Raporlar\u0131n\u0131n g\u00f6nderilece\u011fi e-posta adresidir. <code>rapor@yourdomain.com<\/code> yerine kendi rapor e-posta adresinizi yaz\u0131n. Birden fazla e-posta adresine rapor g\u00f6ndermek isterseniz, virg\u00fclle ay\u0131rarak ekleyebilirsiniz: <code>rua=mailto:rapor1@yourdomain.com,mailto:rapor2@anotherdomain.com;<\/code>.<\/p>\n<h3>DNS Yay\u0131l\u0131m\u0131n\u0131 Bekleme<\/h3>\n<p>DNS kay\u0131tlar\u0131n\u0131zdaki de\u011fi\u015fikliklerin d\u00fcnya genelindeki DNS sunucular\u0131na yay\u0131lmas\u0131 biraz zaman alabilir (birka\u00e7 dakika ile birka\u00e7 saat aras\u0131nda de\u011fi\u015febilir, TTL de\u011ferinize ba\u011fl\u0131 olarak). Kay\u0131tlar\u0131n\u0131z\u0131n do\u011fru bir \u015fekilde yay\u0131ld\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in <code>dig<\/code> komutunu kullanabilirsiniz:<\/p>\n<pre><code class=\"language-bash\">dig TXT _mta-sts.yourdomain.com +short\ndig TXT _smtp._tls.yourdomain.com +short<\/code><\/pre>\n<p>Bu komutlar, DNS kay\u0131tlar\u0131n\u0131z\u0131n de\u011ferlerini g\u00f6stermelidir.<\/p>\n<h2>Ad\u0131m 5: Politikay\u0131 \u0130zleme ve &#8220;Enforce&#8221; Moduna Ge\u00e7i\u015f<\/h2>\n<p>MTA-STS ve TLS Raporlama yap\u0131land\u0131rmas\u0131n\u0131n en kritik a\u015famalar\u0131ndan biri, politikan\u0131z\u0131 <code>testing<\/code> modunda izlemek ve her \u015feyin yolunda gitti\u011finden emin olmakt\u0131r.<\/p>\n<h3>&#8220;Testing&#8221; Modunda \u0130zleme<\/h3>\n<p>Politikan\u0131z\u0131 <code>testing<\/code> modunda ba\u015flatt\u0131\u011f\u0131n\u0131zda, di\u011fer e-posta sunucular\u0131 sizin MTA-STS politikan\u0131z\u0131 uygulayacak ancak herhangi bir ihlal durumunda e-postalar\u0131 engellemek yerine size rapor g\u00f6nderecektir. Bu raporlar, TLS Raporlama TXT kayd\u0131n\u0131zda belirtti\u011finiz <code>rua<\/code> adresine gelecektir.<\/p>\n<p>*   <strong>Raporlar\u0131 \u0130nceleme:<\/strong> Gelen raporlar genellikle JSON format\u0131nda ve s\u0131k\u0131\u015ft\u0131r\u0131lm\u0131\u015f (gzip) olarak gelir. Bu raporlar, g\u00f6nderen sunucular\u0131n sizin alan ad\u0131n\u0131za e-posta g\u00f6nderirken kar\u015f\u0131la\u015ft\u0131klar\u0131 TLS ba\u011flant\u0131 giri\u015fimlerinin \u00f6zetini i\u00e7erir. Raporda, ba\u015far\u0131l\u0131 ba\u011flant\u0131lar, ba\u015far\u0131s\u0131z ba\u011flant\u0131lar, TLS s\u00fcr\u00fcmleri, sertifika hatalar\u0131 ve di\u011fer ilgili bilgiler yer al\u0131r.<br \/>\n*   <strong>Analiz Ara\u00e7lar\u0131:<\/strong> Gelen JSON raporlar\u0131n\u0131 manuel olarak okumak ve analiz etmek zor olabilir. Bu nedenle, Postmark, Mailhardener, OnDMARC gibi \u00fc\u00e7\u00fcnc\u00fc taraf hizmetler veya a\u00e7\u0131k kaynakl\u0131 ara\u00e7lar kullanarak bu raporlar\u0131 daha anla\u015f\u0131l\u0131r bir formatta g\u00f6r\u00fcnt\u00fcleyebilirsiniz. Bu hizmetler, raporlar\u0131 ayr\u0131\u015ft\u0131r\u0131r ve size kolayca okunabilir grafikler veya \u00f6zetler sunar.<br \/>\n*   <strong>Hatalar\u0131 Giderme:<\/strong> Raporlarda herhangi bir hata (\u00f6rne\u011fin, sertifika do\u011frulama hatalar\u0131, MX kay\u0131t uyu\u015fmazl\u0131klar\u0131, TLS ba\u011flant\u0131 sorunlar\u0131) g\u00f6r\u00fcrseniz, ilgili sorunlar\u0131 gidermeniz gerekmektedir. Bu, genellikle Apache yap\u0131land\u0131rman\u0131z\u0131, sertifikalar\u0131n\u0131z\u0131 veya DNS MX kay\u0131tlar\u0131n\u0131z\u0131 kontrol etmeyi i\u00e7erir.<\/p>\n<p>Bu izleme s\u00fcreci, genellikle birka\u00e7 g\u00fcn veya bir hafta s\u00fcrebilir. Bu s\u00fcre zarf\u0131nda, t\u00fcm me\u015fru e-posta ak\u0131\u015f\u0131n\u0131z\u0131n sorunsuz \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan ve raporlarda \u00f6nemli bir hata g\u00f6rmedi\u011finizden emin olman\u0131z \u00f6nemlidir.<\/p>\n<h3>&#8220;Enforce&#8221; Moduna Ge\u00e7i\u015f<\/h3>\n<p>T\u00fcm raporlar temiz oldu\u011funda ve MTA-STS uygulaman\u0131z\u0131n do\u011fru \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin oldu\u011funuzda, politikan\u0131z\u0131 <code>enforce<\/code> moduna ge\u00e7irebilirsiniz. Bu, e-posta g\u00fcvenli\u011finiz i\u00e7in tam koruma sa\u011flayacakt\u0131r.<\/p>\n<p>1.  <strong>MTA-STS Politika Dosyas\u0131n\u0131 G\u00fcncelleme:<\/strong> <code>mta-sts.txt<\/code> dosyas\u0131ndaki <code>mode<\/code> de\u011ferini <code>enforce<\/code> olarak de\u011fi\u015ftirin:<\/p>\n<pre><code class=\"language-bash\">sudo nano \/var\/www\/yourdomain.com\/public_html\/.well-known\/mta-sts\/mta-sts.txt<\/code><\/pre>\n<p>    \u0130\u00e7eri\u011fi \u015fu \u015fekilde g\u00fcncelleyin:<\/p>\n<pre><code class=\"language-\">version: STSv1\n    mode: enforce\n    mx: mail.yourdomain.com\n    mx: *.yourdomain.com\n    max_age: 86400<\/code><\/pre>\n<p>    Dosyay\u0131 kaydedin ve kapat\u0131n. Apache&#8217;yi yeniden y\u00fcklemenize gerek yoktur, \u00e7\u00fcnk\u00fc sadece bir dosya i\u00e7eri\u011fini de\u011fi\u015ftirdiniz.<br \/>\n2.  <strong>DNS TXT Kayd\u0131ndaki <code>id<\/code> De\u011ferini G\u00fcncelleme:<\/strong> Bu ad\u0131m kritik \u00f6neme sahiptir. <code>_mta-sts.yourdomain.com<\/code> TXT kayd\u0131ndaki <code>id<\/code> de\u011ferini yeni bir tarih\/saat damgas\u0131 ile g\u00fcncelleyin. \u00d6rne\u011fin:<br \/>\n    *   <strong>Host\/Ad\/\u0130sim:<\/strong> <code>_mta-sts.yourdomain.com<\/code><br \/>\n    *   <strong>De\u011fer\/Metin:<\/strong> <code>v=STSv1; id=20231027143000;<\/code><br \/>\n    Bu, g\u00f6nderen MTA&#8217;lara politikan\u0131z\u0131n de\u011fi\u015fti\u011fini ve yeni politikay\u0131 tekrar indirmeleri gerekti\u011fini bildirir.<\/p>\n<p>Bu de\u011fi\u015fiklikleri yapt\u0131ktan sonra, TLS Raporlar\u0131n\u0131 izlemeye devam edin. Art\u0131k <code>enforce<\/code> modunda oldu\u011funuz i\u00e7in, herhangi bir TLS ba\u011flant\u0131 ihlali durumunda e-postalar teslim edilmeyecektir. Bu nedenle, herhangi bir yeni hata raporu, acil m\u00fcdahale gerektiren ciddi bir sorunu g\u00f6sterebilir.<\/p>\n<h3>&#8220;Max_Age&#8221; ve Periyodik G\u00fcncellemeler<\/h3>\n<p><code>max_age<\/code> de\u011feri, g\u00f6nderen MTA&#8217;lar\u0131n politikan\u0131z\u0131 \u00f6nbellekte ne kadar s\u00fcreyle tutaca\u011f\u0131n\u0131 belirler. \u0130lk ba\u015fta k\u0131sa bir <code>max_age<\/code> (\u00f6rne\u011fin 24 saat) kullanmak, h\u0131zl\u0131 de\u011fi\u015fiklik yapma esnekli\u011fi sa\u011flar. Her \u015feyin yolunda gitti\u011finden emin oldu\u011funuzda, bu de\u011feri art\u0131rabilirsiniz (\u00f6rne\u011fin 7 g\u00fcn veya 30 g\u00fcn). Daha uzun bir <code>max_age<\/code>, daha az DNS sorgusu ve daha iyi performans anlam\u0131na gelir, ancak politika de\u011fi\u015fikliklerinin yay\u0131lmas\u0131 daha uzun s\u00fcrer.<\/p>\n<p><code>id<\/code> de\u011ferini, <code>mta-sts.txt<\/code> dosyas\u0131nda yapt\u0131\u011f\u0131n\u0131z her de\u011fi\u015fiklikte g\u00fcncellemeniz gerekti\u011fini unutmay\u0131n. Bu, di\u011fer sunucular\u0131n her zaman en g\u00fcncel politikan\u0131z\u0131 kulland\u0131\u011f\u0131ndan emin olman\u0131n tek yoludur.<\/p>\n<h2>S\u0131k Kar\u015f\u0131la\u015f\u0131lan Sorunlar ve \u00c7\u00f6z\u00fcmleri<\/h2>\n<p>MTA-STS yap\u0131land\u0131rmas\u0131 s\u0131ras\u0131nda kar\u015f\u0131la\u015f\u0131labilecek baz\u0131 yayg\u0131n sorunlar ve bunlar\u0131n \u00e7\u00f6z\u00fcmleri \u015funlard\u0131r:<\/p>\n<p>*   <strong><code>mta-sts.txt<\/code> dosyas\u0131na ula\u015f\u0131lam\u0131yor (404 Not Found):<\/strong><br \/>\n    *   <code>DocumentRoot<\/code> yolunun ve <code>.well-known\/mta-sts\/<\/code> dizininin do\u011fru oldu\u011fundan emin olun.<br \/>\n    *   Dizin ve dosya izinlerini kontrol edin (<code>chown<\/code>, <code>chmod<\/code>). Apache kullan\u0131c\u0131s\u0131n\u0131n dosyaya eri\u015fim izni olmal\u0131d\u0131r.<br \/>\n    *   Apache sanal host yap\u0131land\u0131rman\u0131zda <code>ServerName<\/code> ve <code>DocumentRoot<\/code>&#8216;un <code>mta-sts.yourdomain.com<\/code> ile e\u015fle\u015fti\u011fini kontrol edin.<br \/>\n    *   <code>mta-sts.yourdomain.com<\/code> i\u00e7in DNS A kayd\u0131n\u0131n do\u011fru IP adresine i\u015faret etti\u011finden emin olun.<br \/>\n*   <strong>Yanl\u0131\u015f \u0130\u00e7erik T\u00fcr\u00fc (<code>Content-Type<\/code>):<\/strong><br \/>\n    *   <code>curl -v https:\/\/mta-sts.yourdomain.com\/.well-known\/mta-sts\/mta-sts.txt<\/code> komutunu \u00e7al\u0131\u015ft\u0131r\u0131n ve <code>Content-Type<\/code> ba\u015fl\u0131\u011f\u0131n\u0131n <code>text\/plain<\/code> oldu\u011fundan emin olun.<br \/>\n    *   Apache sanal host yap\u0131land\u0131rman\u0131zdaki <code><Files \"mta-sts.txt\"><\/code> blo\u011funun do\u011fru oldu\u011fundan ve <code>Header set Content-Type \"text\/plain\"<\/code> sat\u0131r\u0131n\u0131n bulundu\u011fundan emin olun.<br \/>\n    *   <code>mod_headers<\/code> mod\u00fcl\u00fcn\u00fcn etkin oldu\u011fundan emin olun (<code>sudo a2enmod headers<\/code>).<br \/>\n*   <strong><code>mx<\/code> kay\u0131tlar\u0131n\u0131n uyu\u015fmamas\u0131:<\/strong><br \/>\n    *   <code>mta-sts.txt<\/code> dosyas\u0131ndaki <code>mx:<\/code> kay\u0131tlar\u0131n\u0131n, alan ad\u0131n\u0131z\u0131n DNS MX kay\u0131tlar\u0131yla tam olarak e\u015fle\u015fti\u011finden emin olun. K\u00fc\u00e7\u00fck bir yaz\u0131m hatas\u0131 bile sorunlara yol a\u00e7abilir.<br \/>\n    *   <code>dig MX yourdomain.com<\/code> komutunu kullanarak alan ad\u0131n\u0131z\u0131n g\u00fcncel MX kay\u0131tlar\u0131n\u0131 kontrol edin.<br \/>\n*   <strong><code>id<\/code> de\u011ferinin g\u00fcncellenmemesi:<\/strong><br \/>\n    *   Politika dosyas\u0131nda her de\u011fi\u015fiklik yapt\u0131\u011f\u0131n\u0131zda (\u00f6zellikle <code>mode<\/code> veya <code>mx<\/code> kay\u0131tlar\u0131n\u0131 de\u011fi\u015ftirdi\u011finizde), DNS <code>_mta-sts<\/code> TXT kayd\u0131ndaki <code>id<\/code> de\u011ferini de g\u00fcncellemeniz gerekti\u011fini unutmay\u0131n. Aksi takdirde, g\u00f6nderen MTA&#8217;lar eski politikay\u0131 kullanmaya devam edebilir.<br \/>\n*   <strong>Sertifika hatalar\u0131:<\/strong><br \/>\n    *   <code>mta-sts.yourdomain.com<\/code> i\u00e7in SSL\/TLS sertifikas\u0131n\u0131n ge\u00e7erli, s\u00fcresi dolmam\u0131\u015f ve g\u00fcvenilir bir sertifika yetkilisi taraf\u0131ndan verilmi\u015f oldu\u011fundan emin olun.<br \/>\n    *   Certbot&#8217;un otomatik yenileme i\u015fleminin d\u00fczg\u00fcn \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 kontrol edin (<code>sudo certbot renew --dry-run<\/code>).<br \/>\n    *   Taray\u0131c\u0131n\u0131zda <code>https:\/\/mta-sts.yourdomain.com<\/code> adresini ziyaret ederek sertifika bilgilerini kontrol edin.<br \/>\n*   <strong>DNS yay\u0131l\u0131m\u0131 sorunlar\u0131:<\/strong><br \/>\n    *   DNS kay\u0131tlar\u0131n\u0131zdaki de\u011fi\u015fikliklerin global olarak yay\u0131lmas\u0131 zaman alabilir. <code>dig<\/code> komutuyla kontrol ettikten sonra bile, baz\u0131 sunucular\u0131n eski kay\u0131tlar\u0131 \u00f6nbelle\u011fe almas\u0131 m\u00fcmk\u00fcnd\u00fcr. Sab\u0131rl\u0131 olun ve birka\u00e7 saat bekleyin.<br \/>\n*   <strong>TLS Raporlar\u0131n\u0131n gelmemesi veya bo\u015f gelmesi:<\/strong><br \/>\n    *   <code>_smtp._tls.yourdomain.com<\/code> TXT kayd\u0131ndaki <code>rua<\/code> e-posta adresinin do\u011fru ve \u00e7al\u0131\u015f\u0131r durumda oldu\u011fundan emin olun.<br \/>\n    *   E-posta sa\u011flay\u0131c\u0131n\u0131z\u0131n spam filtrelerini kontrol edin, raporlar bazen spam olarak i\u015faretlenebilir.<br \/>\n    *   Raporlar\u0131n gelmesi biraz zaman alabilir (genellikle g\u00fcnl\u00fck g\u00f6nderilirler).<\/p>\n<h2>Sonu\u00e7<\/h2>\n<p>MTA-STS ve TLS Raporlama, e-posta ileti\u015fiminizi ortadaki adam sald\u0131r\u0131lar\u0131na ve STARTTLS stripping gibi tehditlere kar\u015f\u0131 korumak i\u00e7in g\u00fc\u00e7l\u00fc bir mekanizma sunar. Bu makalede anlat\u0131lan ad\u0131mlar\u0131 dikkatlice uygulayarak, Ubuntu 18.04 ve Apache kullanarak alan ad\u0131n\u0131z i\u00e7in bu kritik g\u00fcvenlik \u00f6nlemlerini ba\u015far\u0131yla yap\u0131land\u0131rabilirsiniz.<\/p>\n<p>Unutulmamal\u0131d\u0131r ki, MTA-STS tek ba\u015f\u0131na t\u00fcm e-posta g\u00fcvenli\u011fi sorunlar\u0131n\u0131 \u00e7\u00f6zmez. DMARC, SPF ve DKIM gibi di\u011fer e-posta kimlik do\u011frulama protokolleriyle birlikte kullan\u0131ld\u0131\u011f\u0131nda, e-posta g\u00fcvenli\u011finiz i\u00e7in kapsaml\u0131 ve \u00e7ok katmanl\u0131 bir koruma sa\u011flar.<\/p>\n<p>Ba\u015flang\u0131\u00e7ta <code>testing<\/code> modunda dikkatli bir izleme yapmak ve TLS Raporlar\u0131n\u0131 d\u00fczenli olarak analiz etmek, olas\u0131 sorunlar\u0131 \u00f6nceden tespit etmenizi ve e-posta ak\u0131\u015f\u0131n\u0131zda kesinti ya\u015famadan <code>enforce<\/code> moduna g\u00fcvenle ge\u00e7menizi sa\u011flayacakt\u0131r. E-posta g\u00fcvenli\u011fi dinamik bir aland\u0131r ve s\u00fcrekli izleme ile bak\u0131m, alan ad\u0131n\u0131z\u0131n ve ileti\u015fiminizin g\u00fcvende kalmas\u0131n\u0131 sa\u011flamak i\u00e7in hayati \u00f6neme sahiptir. Bu ad\u0131mlarla, e-posta g\u00fcvenli\u011fi duru\u015funuzu \u00f6nemli \u00f6l\u00e7\u00fcde g\u00fc\u00e7lendirmi\u015f olacaks\u0131n\u0131z.<\/p>\n<p><\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Apache ve Ubuntu 18.04 Kullanarak Alan Ad\u0131n\u0131z \u0130\u00e7in MTA-STS ve TLS Raporlamas\u0131n\u0131 Yap\u0131land\u0131rma Rehberi\nGiri\u015f\nG\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-35500","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.5 (Yoast SEO v25.3.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Apache ve Ubuntu 18.04 Kullanarak Alan Ad\u0131n\u0131z \u0130\u00e7in MTA-STS ve TLS Raporlamas\u0131n\u0131 Yap\u0131land\u0131rma Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Apache ve Ubuntu 18.04 Kullanarak Alan Ad\u0131n\u0131z \u0130\u00e7in MTA-STS ve TLS Raporlamas\u0131n\u0131 Yap\u0131land\u0131rma Rehberi\" \/>\n<meta property=\"og:description\" content=\"Apache ve Ubuntu 18.04 Kullanarak Alan Ad\u0131n\u0131z \u0130\u00e7in MTA-STS ve TLS Raporlamas\u0131n\u0131 Yap\u0131land\u0131rma Rehberi Giri\u015f G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-30T08:40:51+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"21 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Apache ve Ubuntu 18.04 Kullanarak Alan Ad\u0131n\u0131z \u0130\u00e7in MTA-STS ve TLS Raporlamas\u0131n\u0131 Yap\u0131land\u0131rma Rehberi\",\"datePublished\":\"2025-11-30T08:40:51+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/\"},\"wordCount\":3779,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/\",\"name\":\"Apache ve Ubuntu 18.04 Kullanarak Alan Ad\u0131n\u0131z \u0130\u00e7in MTA-STS ve TLS Raporlamas\u0131n\u0131 Yap\u0131land\u0131rma Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-11-30T08:40:51+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Apache ve Ubuntu 18.04 Kullanarak Alan Ad\u0131n\u0131z \u0130\u00e7in MTA-STS ve TLS Raporlamas\u0131n\u0131 Yap\u0131land\u0131rma Rehberi\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Apache ve Ubuntu 18.04 Kullanarak Alan Ad\u0131n\u0131z \u0130\u00e7in MTA-STS ve TLS Raporlamas\u0131n\u0131 Yap\u0131land\u0131rma Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/","og_locale":"tr_TR","og_type":"article","og_title":"Apache ve Ubuntu 18.04 Kullanarak Alan Ad\u0131n\u0131z \u0130\u00e7in MTA-STS ve TLS Raporlamas\u0131n\u0131 Yap\u0131land\u0131rma Rehberi","og_description":"Apache ve Ubuntu 18.04 Kullanarak Alan Ad\u0131n\u0131z \u0130\u00e7in MTA-STS ve TLS Raporlamas\u0131n\u0131 Yap\u0131land\u0131rma Rehberi Giri\u015f G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131","og_url":"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-11-30T08:40:51+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"21 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Apache ve Ubuntu 18.04 Kullanarak Alan Ad\u0131n\u0131z \u0130\u00e7in MTA-STS ve TLS Raporlamas\u0131n\u0131 Yap\u0131land\u0131rma Rehberi","datePublished":"2025-11-30T08:40:51+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/"},"wordCount":3779,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/","url":"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/","name":"Apache ve Ubuntu 18.04 Kullanarak Alan Ad\u0131n\u0131z \u0130\u00e7in MTA-STS ve TLS Raporlamas\u0131n\u0131 Yap\u0131land\u0131rma Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-11-30T08:40:51+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/apache-ve-ubuntu-18-04-kullanarak-alan-adiniz-icin-mta-sts-ve-tls-raporlamasini-yapilandirma-rehberi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Apache ve Ubuntu 18.04 Kullanarak Alan Ad\u0131n\u0131z \u0130\u00e7in MTA-STS ve TLS Raporlamas\u0131n\u0131 Yap\u0131land\u0131rma Rehberi"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35500","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=35500"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35500\/revisions"}],"predecessor-version":[{"id":35501,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35500\/revisions\/35501"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=35500"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=35500"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=35500"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}