{"id":36087,"date":"2025-12-08T00:40:52","date_gmt":"2025-12-07T21:40:52","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=36087"},"modified":"2025-12-08T00:40:52","modified_gmt":"2025-12-07T21:40:52","slug":"debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/","title":{"rendered":"Debian 6 \u00dczerinde OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131"},"content":{"rendered":"

<\/p>\n

Debian 6 \u00dczerinde OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131<\/h2>\n

Giri\u015f<\/h3>\n

G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, internet \u00fczerindeki veri g\u00fcvenli\u011fi ve gizlili\u011fi her zamankinden daha kritik bir \u00f6neme sahiptir. Sanal \u00d6zel A\u011flar (VPN’ler), kullan\u0131c\u0131lar\u0131n internete g\u00fcvenli ve \u015fifreli bir t\u00fcnel \u00fczerinden ba\u011flanmas\u0131n\u0131 sa\u011flayarak bu ihtiya\u00e7lara g\u00fc\u00e7l\u00fc bir \u00e7\u00f6z\u00fcm sunar. OpenVPN, a\u00e7\u0131k kaynakl\u0131, esnek ve olduk\u00e7a g\u00fcvenli bir VPN \u00e7\u00f6z\u00fcm\u00fc olarak \u00f6ne \u00e7\u0131kmaktad\u0131r. Bu makalede, eski ama hala bir\u00e7ok sunucuda bulunabilen g\u00fcvenilir Debian 6 (Squeeze) i\u015fletim sistemi \u00fczerinde bir OpenVPN sunucusunun ad\u0131m ad\u0131m nas\u0131l kurulaca\u011f\u0131n\u0131 ve yap\u0131land\u0131r\u0131laca\u011f\u0131n\u0131 detayl\u0131 bir \u015fekilde inceleyece\u011fiz. Amac\u0131m\u0131z, temel a\u011f bilgisine sahip kullan\u0131c\u0131lar\u0131n bile kendi g\u00fcvenli VPN sunucular\u0131n\u0131 ba\u015far\u0131yla kurabilmelerini sa\u011flamakt\u0131r.<\/p>\n

OpenVPN Nedir ve Neden Kullan\u0131l\u0131r?<\/h3>\n

OpenVPN, SSL\/TLS protokollerini kullanarak noktadan noktaya veya siteden siteye ba\u011flant\u0131lar kurabilen a\u00e7\u0131k kaynakl\u0131 bir VPN yaz\u0131l\u0131m\u0131d\u0131r. Geleneksel VPN \u00e7\u00f6z\u00fcmlerine k\u0131yasla sundu\u011fu esneklik, g\u00fcvenlik ve platformlar aras\u0131 uyumluluk sayesinde geni\u015f bir kullan\u0131c\u0131 kitlesine hitap eder.<\/p>\n

OpenVPN Kullanman\u0131n Avantajlar\u0131:<\/strong>
\n* G\u00fcvenlik:<\/strong> Verilerinizi \u015fifreleyerek internet servis sa\u011flay\u0131c\u0131n\u0131z\u0131n (\u0130SS) veya di\u011fer k\u00f6t\u00fc niyetli \u00fc\u00e7\u00fcnc\u00fc taraflar\u0131n trafi\u011finizi izlemesini engeller.
\n* Gizlilik:<\/strong> Ger\u00e7ek IP adresinizi gizleyerek internette daha anonim gezinmenizi sa\u011flar. Co\u011frafi k\u0131s\u0131tlamalar\u0131 a\u015fman\u0131za yard\u0131mc\u0131 olabilir.
\n* Uzaktan Eri\u015fim:<\/strong> \u015eirket a\u011flar\u0131na veya ev a\u011f\u0131n\u0131za g\u00fcvenli bir \u015fekilde uzaktan eri\u015fim imkan\u0131 sunar.
\n* A\u00e7\u0131k Kaynak:<\/strong> Kodu herkes taraf\u0131ndan incelenebilir oldu\u011fu i\u00e7in g\u00fcvenlik a\u00e7\u0131klar\u0131 daha h\u0131zl\u0131 tespit edilir ve giderilir, bu da \u015feffafl\u0131k ve g\u00fcvenilirlik sa\u011flar.
\n* Esneklik:<\/strong> TCP veya UDP protokolleri \u00fczerinde \u00e7al\u0131\u015fabilir, farkl\u0131 \u015fifreleme algoritmalar\u0131n\u0131 destekler ve \u00e7e\u015fitli kimlik do\u011frulama y\u00f6ntemleri sunar.<\/p>\n

Debian 6 Sistem Gereksinimleri ve \u00d6n Haz\u0131rl\u0131klar<\/h3>\n

OpenVPN sunucusunu kurmaya ba\u015flamadan \u00f6nce, Debian 6 sisteminizin belirli gereksinimleri kar\u015f\u0131lad\u0131\u011f\u0131ndan ve temel \u00f6n haz\u0131rl\u0131klar\u0131n yap\u0131ld\u0131\u011f\u0131ndan emin olmal\u0131y\u0131z.<\/p>\n

Sistem G\u00fcncellemesi<\/h4>\n

\u00d6ncelikle, sisteminizin g\u00fcncel oldu\u011fundan emin olun. Bu, hem g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 kapatmak hem de paket ba\u011f\u0131ml\u0131l\u0131klar\u0131n\u0131 do\u011fru bir \u015fekilde \u00e7\u00f6zmek i\u00e7in \u00f6nemlidir. SSH arac\u0131l\u0131\u011f\u0131yla sunucunuza ba\u011flan\u0131n ve a\u015fa\u011f\u0131daki komutlar\u0131 \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n

sudo apt-get update\nsudo apt-get upgrade -y<\/code><\/pre>\n
Bu komutlar, paket listelerinizi g\u00fcncelleyecek ve mevcut t\u00fcm paketleri en son s\u00fcr\u00fcmlerine y\u00fckseltecektir.<\/p>\n
Gerekli Paketlerin Kurulumu<\/h4>\n
OpenVPN sunucusunu kurmak i\u00e7in openvpn<\/code> paketine ve sertifika\/anahtar olu\u015fturmak i\u00e7in easy-rsa<\/code> paketine ihtiyac\u0131m\u0131z var. Debian 6’da easy-rsa<\/code> genellikle ayr\u0131 bir paket olarak bulunur.<\/p>\n
sudo apt-get install openvpn easy-rsa -y<\/code><\/pre>\n
Bu komut, OpenVPN sunucusu yaz\u0131l\u0131m\u0131n\u0131 ve sertifika y\u00f6netimi i\u00e7in gerekli ara\u00e7lar\u0131 sisteminize kuracakt\u0131r.<\/p>\n
OpenVPN Sertifika Yetkilisi (CA) Olu\u015fturma<\/h3>\n
OpenVPN, istemcilerin ve sunucunun birbirine g\u00fcvenli bir \u015fekilde ba\u011flanabilmesi i\u00e7in X.509 sertifikalar\u0131n\u0131 kullan\u0131r. Bu sertifikalar\u0131 imzalamak i\u00e7in kendi Sertifika Yetkilimizi (CA) olu\u015fturmam\u0131z gerekir. easy-rsa<\/code> arac\u0131 bu i\u015flemi kolayla\u015ft\u0131r\u0131r.<\/p>\n
easy-rsa Dizinini Haz\u0131rlama<\/h4>\n
easy-rsa<\/code> komut dosyalar\u0131 genellikle \/usr\/share\/easy-rsa<\/code> dizininde bulunur. Bu dizini OpenVPN yap\u0131land\u0131rma dizinimize kopyalayarak \u00fczerinde \u00e7al\u0131\u015faca\u011f\u0131z.<\/p>\n
sudo cp -r \/usr\/share\/easy-rsa\/ \/etc\/openvpn\/easy-rsa\nsudo chown -R root:root \/etc\/openvpn\/easy-rsa\nsudo chmod -R 700 \/etc\/openvpn\/easy-rsa\ncd \/etc\/openvpn\/easy-rsa<\/code><\/pre>\n
Bu ad\u0131mlar, easy-rsa<\/code> dizinini kopyalar, sahiplik ve izinleri ayarlar ve \u00e7al\u0131\u015fma dizinimizi bu konuma ta\u015f\u0131r.<\/p>\n
vars Dosyas\u0131n\u0131 Yap\u0131land\u0131rma<\/h4>\n
easy-rsa<\/code> komut dosyalar\u0131, sertifikalar\u0131n\u0131z i\u00e7in varsay\u0131lan de\u011ferleri i\u00e7eren bir vars<\/code> dosyas\u0131 kullan\u0131r. Bu dosyay\u0131 d\u00fczenleyerek kendi bilgilerinizi girmeniz \u00f6nemlidir.<\/p>\n
sudo nano vars<\/code><\/pre>\n
A\u015fa\u011f\u0131daki sat\u0131rlar\u0131 bulun ve kendi bilgilerinize g\u00f6re d\u00fczenleyin:<\/p>\n
export KEY_COUNTRY=\"TR\"\nexport KEY_PROVINCE=\"Ankara\"\nexport KEY_CITY=\"Cankaya\"\nexport KEY_ORG=\"MyCompany\"\nexport KEY_EMAIL=\"admin@mycompany.com\"\nexport KEY_OU=\"OpenVPN\"\nexport KEY_NAME=\"server\" # Bu sat\u0131r\u0131 \u00f6zellikle de\u011fi\u015ftirmenize gerek yok, build-key-server i\u00e7in kullan\u0131lacak.\nexport KEY_SIZE=2048 # Daha g\u00fc\u00e7l\u00fc g\u00fcvenlik i\u00e7in 2048 bit anahtar boyutu kullan\u0131n.<\/code><\/pre>\n
De\u011fi\u015fiklikleri kaydedin ve d\u00fczenleyiciden \u00e7\u0131k\u0131n (CTRL+O, Enter, CTRL+X).<\/p>\n
\u015eimdi vars<\/code> dosyas\u0131ndaki de\u011fi\u015fkenleri ge\u00e7erli kabuk oturumuna y\u00fcklememiz gerekiyor:<\/p>\n
source .\/vars<\/code><\/pre>\n
Bu komut, vars<\/code> dosyas\u0131ndaki t\u00fcm export<\/code> de\u011fi\u015fkenlerini mevcut kabuk ortam\u0131na aktar\u0131r.<\/p>\n
CA Olu\u015fturma<\/h4>\n
CA’y\u0131 olu\u015fturmadan \u00f6nce, temiz bir ba\u015flang\u0131\u00e7 yapmak i\u00e7in eski anahtarlar\u0131 ve sertifikalar\u0131 temizlemek iyi bir uygulamad\u0131r:<\/p>\n
.\/clean-all<\/code><\/pre>\n
\u015eimdi Sertifika Yetkilisini (CA) olu\u015ftural\u0131m:<\/p>\n
.\/build-ca<\/code><\/pre>\n
Bu komut size birka\u00e7 soru soracakt\u0131r. vars<\/code> dosyas\u0131nda belirledi\u011finiz de\u011ferler varsay\u0131lan olarak g\u00f6r\u00fcnecektir. Genellikle, Enter tu\u015funa basarak varsay\u0131lan de\u011ferleri kabul edebilirsiniz. Ancak “Common Name” (Ortak Ad) i\u00e7in benzersiz bir isim girmeniz \u00f6nerilir, \u00f6rne\u011fin “OpenVPN-CA”.<\/p>\n
Ba\u015far\u0131l\u0131 bir \u015fekilde tamamland\u0131\u011f\u0131nda, ca.crt<\/code> (CA sertifikas\u0131) ve ca.key<\/code> (CA \u00f6zel anahtar\u0131) dosyalar\u0131 keys<\/code> dizini alt\u0131nda olu\u015fturulacakt\u0131r.<\/p>\n
OpenVPN Sunucu Sertifikas\u0131 ve Anahtar\u0131 Olu\u015fturma<\/h3>\n
CA’m\u0131z\u0131 olu\u015fturduktan sonra, OpenVPN sunucusunun kullanaca\u011f\u0131 sertifikay\u0131 ve \u00f6zel anahtar\u0131 olu\u015fturmal\u0131y\u0131z. Bu sertifika, CA taraf\u0131ndan imzalanacakt\u0131r.<\/p>\n
Sunucu Anahtar\u0131 Olu\u015fturma<\/h4>\n
A\u015fa\u011f\u0131daki komutu kullanarak sunucu anahtar\u0131n\u0131 olu\u015fturun:<\/p>\n
.\/build-key-server server<\/code><\/pre>\n
Yine, size birka\u00e7 soru sorulacakt\u0131r. “Common Name” i\u00e7in “server” olarak b\u0131rakman\u0131z \u00f6nemlidir, \u00e7\u00fcnk\u00fc OpenVPN yap\u0131land\u0131rma dosyas\u0131nda bu isimle referans verece\u011fiz. Di\u011fer sorular i\u00e7in varsay\u0131lan de\u011ferleri kabul edebilirsiniz. \u00d6zellikle “A challenge password” ve “An optional company name” sorular\u0131n\u0131 bo\u015f b\u0131rak\u0131n.<\/p>\n
Son olarak, sertifikay\u0131 imzalamak ve onaylamak i\u00e7in iki soru sorulacakt\u0131r: “Sign the certificate? [y\/n]” ve “1 out of 1 certificate requests certified, commit? [y\/n]”. Her iki soruya da y<\/code> (yes) yan\u0131t\u0131n\u0131 verin.<\/p>\n
Bu i\u015flem tamamland\u0131\u011f\u0131nda, server.crt<\/code> (sunucu sertifikas\u0131) ve server.key<\/code> (sunucu \u00f6zel anahtar\u0131) dosyalar\u0131 keys<\/code> dizini alt\u0131nda olu\u015fturulacakt\u0131r.<\/p>\n
Diffie-Hellman Parametreleri Olu\u015fturma<\/h3>\n
Diffie-Hellman (DH) parametreleri, OpenVPN’in \u015fifreli ba\u011flant\u0131lar i\u00e7in g\u00fcvenli bir anahtar de\u011fi\u015fimi yapmas\u0131n\u0131 sa\u011flar. Bu i\u015flem biraz zaman alabilir (anahtar boyutuna ba\u011fl\u0131 olarak 5-15 dakika).<\/p>\n
.\/build-dh<\/code><\/pre>\n
Bu komut, keys<\/code> dizini alt\u0131nda dh2048.pem<\/code> (vars dosyas\u0131nda KEY_SIZE=2048 olarak ayarlad\u0131ysan\u0131z) veya dh1024.pem<\/code> dosyas\u0131n\u0131 olu\u015fturacakt\u0131r.<\/p>\n
TLS Kimlik Do\u011frulama Anahtar\u0131 Olu\u015fturma<\/h3>\n
Ek bir g\u00fcvenlik katman\u0131 sa\u011flamak i\u00e7in TLS kimlik do\u011frulama anahtar\u0131 (HMAC) olu\u015fturaca\u011f\u0131z. Bu anahtar, TLS el s\u0131k\u0131\u015fmas\u0131 s\u0131ras\u0131nda olu\u015fabilecek DoS sald\u0131r\u0131lar\u0131n\u0131 ve UDP port taramalar\u0131n\u0131 engellemeye yard\u0131mc\u0131 olur.<\/p>\n
openvpn --genkey --secret \/etc\/openvpn\/easy-rsa\/keys\/ta.key<\/code><\/pre>\n
Bu komut, ta.key<\/code> dosyas\u0131n\u0131 keys<\/code> dizini alt\u0131nda olu\u015fturacakt\u0131r.<\/p>\n
Gerekli Dosyalar\u0131 OpenVPN Dizinine Kopyalama<\/h3>\n
\u015eimdi olu\u015fturdu\u011fumuz t\u00fcm gerekli sertifika ve anahtar dosyalar\u0131n\u0131 OpenVPN’in ana yap\u0131land\u0131rma dizinine \/etc\/openvpn\/<\/code> kopyalamam\u0131z gerekiyor.<\/p>\n
sudo cp \/etc\/openvpn\/easy-rsa\/keys\/ca.crt \/etc\/openvpn\/\nsudo cp \/etc\/openvpn\/easy-rsa\/keys\/server.crt \/etc\/openvpn\/\nsudo cp \/etc\/openvpn\/easy-rsa\/keys\/server.key \/etc\/openvpn\/\nsudo cp \/etc\/openvpn\/easy-rsa\/keys\/dh2048.pem \/etc\/openvpn\/ # Veya dh1024.pem\nsudo cp \/etc\/openvpn\/easy-rsa\/keys\/ta.key \/etc\/openvpn\/<\/code><\/pre>\n
Bu dosyalar\u0131n sahiplik ve izinlerinin de do\u011fru oldu\u011fundan emin olal\u0131m:<\/p>\n
sudo chown root:root \/etc\/openvpn\/*.{crt,key,pem}\nsudo chmod 600 \/etc\/openvpn\/server.key\nsudo chmod 600 \/etc\/openvpn\/ca.crt\nsudo chmod 600 \/etc\/openvpn\/dh2048.pem\nsudo chmod 600 \/etc\/openvpn\/ta.key<\/code><\/pre>\n
server.key<\/code> dosyas\u0131n\u0131n yaln\u0131zca root kullan\u0131c\u0131s\u0131 taraf\u0131ndan okunabilir oldu\u011fundan emin olmak \u00e7ok \u00f6nemlidir.<\/p>\n
OpenVPN Sunucu Yap\u0131land\u0131rma Dosyas\u0131 Olu\u015fturma<\/h3>\n
\u015eimdi OpenVPN sunucusunun nas\u0131l \u00e7al\u0131\u015faca\u011f\u0131n\u0131 belirleyen ana yap\u0131land\u0131rma dosyas\u0131n\u0131 olu\u015fturaca\u011f\u0131z: \/etc\/openvpn\/server.conf<\/code>.<\/p>\n
sudo nano \/etc\/openvpn\/server.conf<\/code><\/pre>\n
A\u015fa\u011f\u0131daki i\u00e7eri\u011fi dosyaya yap\u0131\u015ft\u0131r\u0131n. Her bir sat\u0131r\u0131n ne anlama geldi\u011fini k\u0131saca a\u00e7\u0131klayaca\u011f\u0131z:<\/p>\n
# OpenVPN Sunucu Yap\u0131land\u0131rmas\u0131\nport 1194\nproto udp\ndev tun\n\n
CA, Sunucu Sertifikas\u0131 ve Anahtar Dosyalar\u0131<\/h2>\nca ca.crt\ncert server.crt\nkey server.key\ndh dh2048.pem # Diffie-Hellman parametreleri (dosya ad\u0131n\u0131zla e\u015fle\u015fmeli)\n\n
VPN \u0130stemcilerine atanacak IP adresi aral\u0131\u011f\u0131<\/h2>\nserver 10.8.0.0 255.255.255.0\n\n
Ba\u011flant\u0131 durumunu izlemek i\u00e7in istemci IP adreslerini bir dosyada tut<\/h2>\nifconfig-pool-persist ipp.txt\n\n
\u0130stemcilere varsay\u0131lan a\u011f ge\u00e7idini OpenVPN sunucusu olarak kullanmalar\u0131n\u0131 s\u00f6yle<\/h2>\npush \"redirect-gateway def1 bypass-dhcp\"\n\n
\u0130stemcilere DNS sunucular\u0131n\u0131 ilet (\u00f6rn. Google DNS)<\/h2>\npush \"dhcp-option DNS 8.8.8.8\"\npush \"dhcp-option DNS 8.8.4.4\"\n\n
Ba\u011flant\u0131n\u0131n aktif kalmas\u0131n\u0131 sa\u011flamak i\u00e7in keepalive paketi g\u00f6nder<\/h2>\nkeepalive 10 120\n\n
TLS Kimlik Do\u011frulama Anahtar\u0131<\/h2>\ntls-auth ta.key 0 # 0 sunucu taraf\u0131 i\u00e7indir, 1 istemci taraf\u0131\n\n
\u015eifreleme algoritmas\u0131 (AES-256-CBC g\u00fc\u00e7l\u00fc bir se\u00e7enektir)<\/h2>\ncipher AES-256-CBC\n\n
Veri s\u0131k\u0131\u015ft\u0131rmay\u0131 etkinle\u015ftir (iste\u011fe ba\u011fl\u0131, performans art\u0131rabilir)<\/h2>\ncomp-lzo\n\n
Ayr\u0131cal\u0131ks\u0131z kullan\u0131c\u0131 ve grup olarak \u00e7al\u0131\u015f<\/h2>\nuser nobody\ngroup nogroup\n\n
Anahtar ve t\u00fcnel kal\u0131c\u0131l\u0131\u011f\u0131 (yeniden ba\u015flatmalarda anahtarlar\u0131\/t\u00fcneli yeniden a\u00e7maya gerek yok)<\/h2>\npersist-key\npersist-tun\n\n
Durum dosyas\u0131n\u0131 ve log seviyesini ayarla<\/h2>\nstatus openvpn-status.log\nverb 3 # Log detay seviyesi (3 iyi bir ba\u015flang\u0131\u00e7t\u0131r)\nexplicit-exit-notify 1 # \u0130stemcilere sunucunun kapand\u0131\u011f\u0131n\u0131 bildir\n\n
Otomatik olarak yeniden ba\u011flanma<\/h2>\nreneg-sec 0<\/code><\/pre>\n
Dosyay\u0131 kaydedin ve kapat\u0131n.<\/p>\n
Yap\u0131land\u0131rma A\u00e7\u0131klamalar\u0131:<\/strong>
\n*   port 1194<\/code>, proto udp<\/code>: OpenVPN’in dinleyece\u011fi port ve protokol. UDP genellikle daha h\u0131zl\u0131d\u0131r.
\n*   dev tun<\/code>: IP t\u00fcnelleme i\u00e7in bir y\u00f6nlendirilmi\u015f (routed) IP t\u00fcneli olu\u015fturur.
\n*   ca<\/code>, cert<\/code>, key<\/code>, dh<\/code>: Daha \u00f6nce olu\u015fturdu\u011fumuz sertifika ve anahtar dosyalar\u0131n\u0131n yollar\u0131.
\n*   server 10.8.0.0 255.255.255.0<\/code>: VPN istemcilerine 10.8.0.0\/24 alt a\u011f\u0131ndan IP adresleri atanaca\u011f\u0131n\u0131 belirtir.
\n*   push \"redirect-gateway def1 bypass-dhcp\"<\/code>: \u0130stemcilerin t\u00fcm internet trafi\u011fini VPN t\u00fcneli \u00fczerinden y\u00f6nlendirmesini sa\u011flar.
\n*   push \"dhcp-option DNS ...\"<\/code>: \u0130stemcilere kullan\u0131lacak DNS sunucular\u0131n\u0131 bildirir.
\n*   tls-auth ta.key 0<\/code>: TLS kimlik do\u011frulamas\u0131n\u0131 etkinle\u015ftirir.
\n*   cipher AES-256-CBC<\/code>: Kullan\u0131lacak \u015fifreleme algoritmas\u0131.<\/p>\n
A\u011f Yap\u0131land\u0131rmas\u0131 ve IP Y\u00f6nlendirme<\/h3>\n
OpenVPN sunucusunun istemci trafi\u011fini internete y\u00f6nlendirebilmesi i\u00e7in IP y\u00f6nlendirmeyi etkinle\u015ftirmemiz ve g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 ayarlamam\u0131z gerekir.<\/p>\n
IP Y\u00f6nlendirmeyi Etkinle\u015ftirme<\/h4>\n
Sunucunuzun bir a\u011f aray\u00fcz\u00fcnden gelen paketleri ba\u015fka bir a\u011f aray\u00fcz\u00fcne y\u00f6nlendirmesi i\u00e7in IP y\u00f6nlendirmeyi etkinle\u015ftirmeniz gerekir.<\/p>\n
sudo nano \/etc\/sysctl.conf<\/code><\/pre>\n
Dosya i\u00e7inde net.ipv4.ip_forward=1<\/code> sat\u0131r\u0131n\u0131 bulun. E\u011fer ba\u015f\u0131nda #<\/code> i\u015fareti varsa, bu yorum sat\u0131r\u0131n\u0131 kald\u0131rarak etkinle\u015ftirin. Yoksa, dosyan\u0131n sonuna ekleyin.<\/p>\n
De\u011fi\u015fiklikleri kaydedin ve kapat\u0131n. Ard\u0131ndan, yeni ayarlar\u0131 hemen uygulamak i\u00e7in a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n
sudo sysctl -p<\/code><\/pre>\n
G\u00fcvenlik Duvar\u0131 Kurallar\u0131 (iptables)<\/h4>\n
iptables<\/code> kullanarak g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 yap\u0131land\u0131rmam\u0131z gerekiyor. Bu kurallar, OpenVPN trafi\u011fine izin verecek ve VPN istemcilerinden gelen trafi\u011fin internete y\u00f6nlendirilmesini sa\u011flayacakt\u0131r (NAT – Network Address Translation).<\/p>\n
\u00d6ncelikle, sunucunuzun internete bakan a\u011f aray\u00fcz\u00fcn\u00fcn ad\u0131n\u0131 \u00f6\u011frenin (genellikle eth0<\/code>).<\/p>\n
ip a<\/code><\/pre>\n
\u00c7\u0131kt\u0131da genellikle eth0<\/code> veya enpXsX<\/code> gibi bir isim g\u00f6receksiniz. A\u015fa\u011f\u0131daki \u00f6rneklerde eth0<\/code> kullanaca\u011f\u0131z, siz kendi aray\u00fcz ad\u0131n\u0131zla de\u011fi\u015ftirin.<\/p>\n
# OpenVPN portuna (UDP 1194) gelen ba\u011flant\u0131lara izin ver\nsudo iptables -A INPUT -i eth0 -p udp --dport 1194 -j ACCEPT\n\n
VPN t\u00fcnel aray\u00fcz\u00fcnden (tun0) gelen t\u00fcm trafi\u011fe izin ver<\/h2>\nsudo iptables -A INPUT -i tun+ -j ACCEPT\n\n
VPN t\u00fcnel aray\u00fcz\u00fcnden internete giden trafi\u011fe izin ver<\/h2>\nsudo iptables -A FORWARD -i tun+ -j ACCEPT\n\n
\u0130nternetten VPN t\u00fcnel aray\u00fcz\u00fcne d\u00f6nen trafi\u011fe izin ver<\/h2>\nsudo iptables -A FORWARD -o tun+ -j ACCEPT\n\n
Mevcut ve ilgili ba\u011flant\u0131lara izin ver<\/h2>\nsudo iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT\n\n
VPN istemcilerinden gelen trafi\u011fi d\u0131\u015f aray\u00fcz \u00fczerinden NAT yap<\/h2>\nsudo iptables -t nat -A POSTROUTING -s 10.8.0.0\/24 -o eth0 -j MASQUERADE<\/code><\/pre>\n
Bu kurallar\u0131 kal\u0131c\u0131 hale getirmek i\u00e7in iptables-persistent<\/code> paketini kurabilirsiniz. Debian 6’da bu paket mevcuttur.<\/p>\n
sudo apt-get install iptables-persistent -y<\/code><\/pre>\n
Kurulum s\u0131ras\u0131nda mevcut kurallar\u0131 kaydetmek isteyip istemedi\u011finiz sorulacakt\u0131r. “Yes” yan\u0131t\u0131n\u0131 verin. E\u011fer daha sonra kurallar\u0131 g\u00fcncellerseniz, a\u015fa\u011f\u0131daki komutlarla kaydedebilirsiniz:<\/p>\n
sudo iptables-save > \/etc\/iptables\/rules.v4<\/code><\/pre>\n
OpenVPN Sunucusunu Ba\u015flatma ve Otomatik Ba\u015flatma<\/h3>\n
T\u00fcm yap\u0131land\u0131rmalar tamamland\u0131\u011f\u0131na g\u00f6re, OpenVPN sunucusunu ba\u015flatabiliriz.<\/p>\n
sudo service openvpn start<\/code><\/pre>\n
Sunucunun durumunu kontrol etmek i\u00e7in:<\/p>\n
sudo service openvpn status<\/code><\/pre>\n
Veya daha detayl\u0131 loglar\u0131 g\u00f6rmek i\u00e7in:<\/p>\n
tail -f \/var\/log\/syslog<\/code><\/pre>\n
E\u011fer her \u015fey yolundaysa, OpenVPN’in ba\u015far\u0131yla ba\u015flad\u0131\u011f\u0131n\u0131 belirten mesajlar g\u00f6rmelisiniz.<\/p>\n
Sunucunun her yeniden ba\u015flatmada otomatik olarak ba\u015flamas\u0131n\u0131 sa\u011flamak i\u00e7in:<\/p>\n
sudo update-rc.d openvpn enable<\/code><\/pre>\n
\u0130stemci Sertifikas\u0131 ve Anahtar\u0131 Olu\u015fturma<\/h3>\n
Her bir VPN istemcisi i\u00e7in benzersiz bir sertifika ve anahtar \u00e7ifti olu\u015fturman\u0131z gerekir. Bu, her istemcinin kendi kimli\u011fiyle kimlik do\u011frulamas\u0131 yapmas\u0131n\u0131 sa\u011flar ve bir istemcinin anahtar\u0131n\u0131n tehlikeye girmesi durumunda di\u011ferlerini etkilemez.<\/p>\n
easy-rsa<\/code> dizinine geri d\u00f6n\u00fcn ve vars<\/code> dosyas\u0131n\u0131 tekrar y\u00fckleyin:<\/p>\n
cd \/etc\/openvpn\/easy-rsa\nsource .\/vars<\/code><\/pre>\n
\u015eimdi bir istemci i\u00e7in sertifika ve anahtar olu\u015ftural\u0131m (\u00f6rne\u011fin client1<\/code> ad\u0131nda):<\/p>\n
.\/build-key client1<\/code><\/pre>\n
“Common Name” soruldu\u011funda, bu istemci i\u00e7in benzersiz bir isim girin (\u00f6rn. client1<\/code>). Di\u011fer sorular i\u00e7in Enter tu\u015funa basarak varsay\u0131lanlar\u0131 kabul edin. “A challenge password” ve “An optional company name” sorular\u0131n\u0131 bo\u015f b\u0131rak\u0131n.<\/p>\n
Son olarak, sertifikay\u0131 imzalamak ve onaylamak i\u00e7in iki soruya da y<\/code> (yes) yan\u0131t\u0131n\u0131 verin.<\/p>\n
Bu i\u015flem tamamland\u0131\u011f\u0131nda, keys<\/code> dizini alt\u0131nda client1.crt<\/code>, client1.key<\/code> ve client1.csr<\/code> dosyalar\u0131 olu\u015fturulacakt\u0131r. Her yeni istemci i\u00e7in bu ad\u0131m\u0131 tekrarlayarak farkl\u0131 isimler kullan\u0131n (\u00f6rn. client2<\/code>, client3<\/code>).<\/p>\n
\u0130stemci Yap\u0131land\u0131rmas\u0131<\/h3>\n
\u0130stemcinin VPN sunucusuna ba\u011flanabilmesi i\u00e7in belirli dosyalara ve bir yap\u0131land\u0131rma dosyas\u0131na ihtiyac\u0131 vard\u0131r.<\/p>\n
Gerekli Dosyalar\u0131n Aktar\u0131lmas\u0131<\/h4>\n
Her istemci i\u00e7in a\u015fa\u011f\u0131daki dosyalar\u0131 sunucudan istemciye g\u00fcvenli bir \u015fekilde aktarman\u0131z gerekir:
\n*   ca.crt<\/code> (CA sertifikas\u0131)
\n*   client1.crt<\/code> (\u0130stemci sertifikas\u0131)
\n*   client1.key<\/code> (\u0130stemci \u00f6zel anahtar\u0131)
\n*   ta.key<\/code> (TLS kimlik do\u011frulama anahtar\u0131)<\/p>\n
Bu dosyalar \/etc\/openvpn\/<\/code> ve \/etc\/openvpn\/easy-rsa\/keys\/<\/code> dizinlerinde bulunur. \u00d6rne\u011fin, scp<\/code> komutunu kullanarak bu dosyalar\u0131 yerel makinenize indirebilirsiniz:<\/p>\n
scp user@your_server_ip:\/etc\/openvpn\/ca.crt .\nscp user@your_server_ip:\/etc\/openvpn\/easy-rsa\/keys\/client1.crt .\nscp user@your_server_ip:\/etc\/openvpn\/easy-rsa\/keys\/client1.key .\nscp user@your_server_ip:\/etc\/openvpn\/ta.key .<\/code><\/pre>\n
Bu dosyalar\u0131, istemcinizin OpenVPN yap\u0131land\u0131rma dizininde bir araya getirin.<\/p>\n
\u0130stemci Yap\u0131land\u0131rma Dosyas\u0131 Olu\u015fturma<\/h4>\n
\u0130stemcinin kullanaca\u011f\u0131 bir .ovpn<\/code> yap\u0131land\u0131rma dosyas\u0131 olu\u015fturun (\u00f6rne\u011fin client1.ovpn<\/code>). Bu dosyay\u0131 yukar\u0131daki sertifika ve anahtar dosyalar\u0131yla ayn\u0131 dizine koyun.<\/p>\n
client\ndev tun\nproto udp\nremote YOUR_SERVER_IP 1194 # Sunucunuzun genel IP adresini veya alan ad\u0131n\u0131 girin\nresolv-retry infinite\nnobind\npersist-key\npersist-tun\nca ca.crt\ncert client1.crt\nkey client1.key\nremote-cert-tls server\ntls-auth ta.key 1 # 1 istemci taraf\u0131 i\u00e7indir\ncipher AES-256-CBC\ncomp-lzo\nverb 3<\/code><\/pre>\n
YOUR_SERVER_IP<\/code> yerine OpenVPN sunucunuzun genel IP adresini veya alan ad\u0131n\u0131 yazmay\u0131 unutmay\u0131n.<\/p>\n
\u0130stemci Uygulamalar\u0131:<\/strong>
\n*   Windows:<\/strong> OpenVPN GUI uygulamas\u0131n\u0131 indirip kurun. .ovpn<\/code> dosyas\u0131n\u0131 ve sertifika\/anahtar dosyalar\u0131n\u0131 C:\\Program Files\\OpenVPN\\config<\/code> dizinine yerle\u015ftirin. Uygulamay\u0131 y\u00f6netici olarak \u00e7al\u0131\u015ft\u0131r\u0131n ve ba\u011flan\u0131n.
\n*   macOS:<\/strong> Tunnelblick veya OpenVPN Connect gibi uygulamalar\u0131 kullan\u0131n. .ovpn<\/code> dosyas\u0131n\u0131 \u00e7ift t\u0131klayarak import edebilirsiniz.
\n*   Linux:<\/strong> openvpn<\/code> paketini kurun. Yap\u0131land\u0131rma dosyas\u0131n\u0131 \/etc\/openvpn\/client1.conf<\/code> olarak kaydedin ve sudo openvpn --config \/etc\/openvpn\/client1.conf<\/code> komutuyla veya a\u011f y\u00f6neticisi \u00fczerinden ba\u011flan\u0131n.<\/p>\n
Sorun Giderme ve Yayg\u0131n Hatalar<\/h3>\n
OpenVPN kurulumu s\u0131ras\u0131nda veya sonras\u0131nda baz\u0131 sorunlarla kar\u015f\u0131la\u015fabilirsiniz. \u0130\u015fte yayg\u0131n sorunlar ve \u00e7\u00f6z\u00fcmleri:<\/p>\n
*   Ba\u011flant\u0131 Kurulam\u0131yor:<\/strong>
\n    *   G\u00fcvenlik Duvar\u0131:<\/strong> Sunucunuzdaki iptables<\/code> kurallar\u0131n\u0131 kontrol edin. 1194\/UDP portunun a\u00e7\u0131k oldu\u011fundan ve NAT kurallar\u0131n\u0131n do\u011fru oldu\u011fundan emin olun.
\n    *   IP Y\u00f6nlendirme:<\/strong> \/etc\/sysctl.conf<\/code> dosyas\u0131nda net.ipv4.ip_forward=1<\/code> sat\u0131r\u0131n\u0131n etkin oldu\u011fundan ve sudo sysctl -p<\/code> ile uyguland\u0131\u011f\u0131ndan emin olun.
\n    *   Sunucu Loglar\u0131:<\/strong> \/var\/log\/syslog<\/code> veya openvpn-status.log<\/code> dosyalar\u0131n\u0131 kontrol ederek hata mesajlar\u0131n\u0131 aray\u0131n (tail -f \/var\/log\/syslog<\/code>).
\n    *   A\u011f Aray\u00fcz\u00fc:<\/strong> server.conf<\/code> dosyas\u0131ndaki dev tun<\/code> ve iptables<\/code> kurallar\u0131ndaki d\u0131\u015f aray\u00fcz ad\u0131n\u0131n (\u00f6rn. eth0<\/code>) do\u011fru oldu\u011fundan emin olun.
\n*   Sertifika Hatalar\u0131:<\/strong>
\n    *   Common Name:<\/strong> Sunucu ve istemci sertifikalar\u0131n\u0131n “Common Name” de\u011ferlerinin do\u011fru oldu\u011fundan (sunucu i\u00e7in “server”, istemciler i\u00e7in benzersiz isimler) ve CA taraf\u0131ndan imzaland\u0131\u011f\u0131ndan emin olun.
\n    *   Dosya Yollar\u0131:<\/strong> Yap\u0131land\u0131rma dosyalar\u0131ndaki ca<\/code>, cert<\/code>, key<\/code>, dh<\/code>, ta.key<\/code> yollar\u0131n\u0131n do\u011fru oldu\u011fundan emin olun.
\n    *   Zaman Senkronizasyonu:<\/strong> Sunucu ve istemci aras\u0131ndaki zaman fark\u0131 \u00e7ok fazlaysa sertifika hatalar\u0131 olu\u015fabilir. ntpdate<\/code> ile zaman\u0131 senkronize edin.
\n*   \u0130stemci Ba\u011flan\u0131yor ama \u0130nternet Yok:<\/strong>
\n    *   NAT Kural\u0131:<\/strong> iptables -t nat -A POSTROUTING -s 10.8.0.0\/24 -o eth0 -j MASQUERADE<\/code> kural\u0131n\u0131n do\u011fru ve etkin oldu\u011fundan emin olun. eth0<\/code> yerine do\u011fru d\u0131\u015f aray\u00fcz ad\u0131n\u0131 kulland\u0131n\u0131z m\u0131?
\n    *   DNS Ayarlar\u0131:<\/strong> \u0130stemci yap\u0131land\u0131rma dosyas\u0131ndaki push \"dhcp-option DNS ...\"<\/code> sat\u0131rlar\u0131n\u0131n do\u011fru DNS sunucular\u0131n\u0131 belirtti\u011finden emin olun.
\n    *   redirect-gateway:<\/strong> push \"redirect-gateway def1 bypass-dhcp\"<\/code> sat\u0131r\u0131n\u0131n istemci yap\u0131land\u0131rmas\u0131nda etkin oldu\u011fundan emin olun.
\n*   Performans Sorunlar\u0131:<\/strong>
\n    *   comp-lzo<\/code> s\u0131k\u0131\u015ft\u0131rmas\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rakmay\u0131 deneyin (hem sunucu hem istemci taraf\u0131nda).
\n    *   Daha g\u00fc\u00e7l\u00fc bir sunucu kullan\u0131n veya daha az yo\u011fun saatlerde test edin.
\n    *   cipher<\/code> algoritmas\u0131n\u0131 daha az kaynak t\u00fcketen bir algoritmayla de\u011fi\u015ftirmeyi d\u00fc\u015f\u00fcnebilirsiniz (ancak g\u00fcvenlikten \u00f6d\u00fcn vermemeye dikkat edin).<\/p>\n
G\u00fcvenlik \u0130pu\u00e7lar\u0131<\/h3>\n
OpenVPN sunucunuzu kurduktan sonra g\u00fcvenli\u011fini sa\u011flamak i\u00e7in baz\u0131 ek \u00f6nlemler alman\u0131z \u00f6nemlidir:
\n*   G\u00fcncel Tutun:<\/strong> Debian 6 eski bir s\u00fcr\u00fcm olsa da, m\u00fcmk\u00fcn oldu\u011funca sisteminizi ve OpenVPN paketini g\u00fcncel tutmaya \u00e7al\u0131\u015f\u0131n. M\u00fcmk\u00fcnse daha yeni bir Debian s\u00fcr\u00fcm\u00fcne ge\u00e7meyi d\u00fc\u015f\u00fcn\u00fcn.
\n*   G\u00fc\u00e7l\u00fc Anahtarlar:<\/strong> Diffie-Hellman anahtar boyutunu (DH) 2048 bit veya daha y\u00fcksek tutun.
\n*   K\u0131s\u0131tl\u0131 \u0130zinler:<\/strong> \u00d6zel anahtar dosyalar\u0131n\u0131n (\u00f6rn. server.key<\/code>, client1.key<\/code>, ca.key<\/code>) yaln\u0131zca root taraf\u0131ndan okunabilir oldu\u011fundan emin olun (chmod 600<\/code>).
\n*   Gereksiz Portlar\u0131 Kapat\u0131n:<\/strong> iptables<\/code> kurallar\u0131n\u0131zla yaln\u0131zca OpenVPN portunu (1194 UDP) ve SSH portunu (22 TCP) a\u00e7\u0131k b\u0131rak\u0131n. Di\u011fer t\u00fcm portlar\u0131 kapat\u0131n.
\n*   TLS Kimlik Do\u011frulama:<\/strong> tls-auth<\/code> anahtar\u0131n\u0131 mutlaka kullan\u0131n. Bu, DoS sald\u0131r\u0131lar\u0131na kar\u015f\u0131 ek bir koruma sa\u011flar.
\n*   \u0130stemci Anahtarlar\u0131n\u0131 Koruyun:<\/strong> \u0130stemci sertifika ve anahtar dosyalar\u0131n\u0131 (\u00f6rn. client1.ovpn<\/code>, client1.crt<\/code>, client1.key<\/code>, ca.crt<\/code>, ta.key<\/code>) g\u00fcvenli bir \u015fekilde saklay\u0131n ve yetkisiz ki\u015filerin eri\u015fmesini engelleyin.
\n*   Loglar\u0131 \u0130zleyin:<\/strong> Sunucu loglar\u0131n\u0131 d\u00fczenli olarak kontrol edin (\/var\/log\/syslog<\/code>, openvpn-status.log<\/code>) ola\u011fan d\u0131\u015f\u0131 etkinlikleri tespit etmek i\u00e7in.
\n*   Ayr\u0131cal\u0131ks\u0131z Kullan\u0131c\u0131:<\/strong> OpenVPN’in nobody<\/code> kullan\u0131c\u0131s\u0131 ve nogroup<\/code> grubu alt\u0131nda \u00e7al\u0131\u015fmas\u0131n\u0131 sa\u011flay\u0131n (user nobody<\/code>, group nogroup<\/code>). Bu, bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131 durumunda zarar\u0131n boyutunu s\u0131n\u0131rlar.<\/p>\n
Sonu\u00e7<\/h3>\n
Bu makalede, Debian 6 i\u015fletim sistemi \u00fczerinde eksiksiz bir OpenVPN sunucusu kurulumu ve yap\u0131land\u0131rma s\u00fcrecini ad\u0131m ad\u0131m ele ald\u0131k. Kendi Sertifika Yetkilinizi olu\u015fturmaktan, sunucu ve istemci sertifikalar\u0131n\u0131 d\u00fczenlemeye, a\u011f yap\u0131land\u0131rmas\u0131n\u0131 ayarlamaya ve g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 uygulamaya kadar her detay\u0131 inceledik. Art\u0131k kendi g\u00fcvenli VPN sunucunuza sahipsiniz ve internet trafi\u011finizi \u015fifreleyerek gizlili\u011finizi ve g\u00fcvenli\u011finizi art\u0131rabilirsiniz. Unutmay\u0131n ki, OpenVPN’in tam potansiyelinden yararlanmak i\u00e7in g\u00fcvenlik en iyi uygulamalar\u0131n\u0131 takip etmek ve sisteminizi g\u00fcncel tutmak hayati \u00f6nem ta\u015f\u0131r.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Debian 6 \u00dczerinde OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131\nGiri\u015f\nG\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, internet \u00fczerindeki veri g\u00fcvenli\u011fi ve","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[241],"tags":[],"class_list":{"0":"post-36087","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-linux","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nDebian 6 \u00dczerinde OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Debian 6 \u00dczerinde OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131\" \/>\n<meta property=\"og:description\" content=\"Debian 6 \u00dczerinde OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 Giri\u015f G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, internet \u00fczerindeki veri g\u00fcvenli\u011fi ve\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-07T21:40:52+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"17 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Debian 6 \u00dczerinde OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131\",\"datePublished\":\"2025-12-07T21:40:52+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/\"},\"wordCount\":2495,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Linux\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/\",\"name\":\"Debian 6 \u00dczerinde OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-12-07T21:40:52+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Debian 6 \u00dczerinde OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Debian 6 \u00dczerinde OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/","og_locale":"tr_TR","og_type":"article","og_title":"Debian 6 \u00dczerinde OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131","og_description":"Debian 6 \u00dczerinde OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 Giri\u015f G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, internet \u00fczerindeki veri g\u00fcvenli\u011fi ve","og_url":"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-12-07T21:40:52+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"17 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Debian 6 \u00dczerinde OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131","datePublished":"2025-12-07T21:40:52+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/"},"wordCount":2495,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Linux"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/","url":"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/","name":"Debian 6 \u00dczerinde OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-12-07T21:40:52+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/debian-6-uzerinde-openvpn-sunucusu-kurulumu-ve-yapilandirmasi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Debian 6 \u00dczerinde OpenVPN Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/36087","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=36087"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/36087\/revisions"}],"predecessor-version":[{"id":36088,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/36087\/revisions\/36088"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=36087"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=36087"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=36087"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}