{"id":36993,"date":"2025-12-25T22:40:59","date_gmt":"2025-12-25T19:40:59","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=36993"},"modified":"2025-12-25T22:40:59","modified_gmt":"2025-12-25T19:40:59","slug":"ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/","title":{"rendered":"Ubuntu \u00dczerinde Config Server Firewall (CSF) Kurulumu ve Yap\u0131land\u0131rmas\u0131"},"content":{"rendered":"

<\/p>\n

Ubuntu \u00dczerinde Config Server Firewall (CSF) Kurulumu ve Yap\u0131land\u0131rmas\u0131<\/h2>\n

Giri\u015f: Sunucu G\u00fcvenli\u011finde CSF’nin \u00d6nemi<\/h3>\n

G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda, sunucu g\u00fcvenli\u011fi her zamankinden daha kritik bir \u00f6neme sahiptir. \u0130nternet’e a\u00e7\u0131k bir Ubuntu sunucusu, s\u00fcrekli olarak \u00e7e\u015fitli siber tehditlere, k\u00f6t\u00fc niyetli sald\u0131r\u0131lara ve yetkisiz eri\u015fim denemelerine maruz kalmaktad\u0131r. Bu tehditlere kar\u015f\u0131 en temel ve etkili savunma mekanizmalar\u0131ndan biri, g\u00fc\u00e7l\u00fc bir g\u00fcvenlik duvar\u0131 (firewall) kullanmakt\u0131r. Config Server Firewall (CSF), \u00f6zellikle Linux tabanl\u0131 sunucular i\u00e7in tasarlanm\u0131\u015f, kapsaml\u0131 \u00f6zelliklere sahip, geli\u015fmi\u015f bir g\u00fcvenlik duvar\u0131 \u00e7\u00f6z\u00fcm\u00fcd\u00fcr. CSF, sadece bir paket filtreleme arac\u0131 olman\u0131n \u00f6tesine ge\u00e7erek, sunucunuzu brute-force sald\u0131r\u0131lar\u0131ndan, port taramalar\u0131ndan, SYN flood gibi DoS sald\u0131r\u0131lar\u0131ndan koruyan ve \u015f\u00fcpheli etkinlikleri izleyen bir dizi g\u00fcvenlik \u00f6zelli\u011fi sunar.<\/p>\n

CSF’nin en dikkat \u00e7ekici \u00f6zelliklerinden biri, beraberinde gelen Login Failure Daemon (LFD) arac\u0131d\u0131r. LFD, ba\u015far\u0131s\u0131z oturum a\u00e7ma denemelerini (SSH, FTP, cPanel vb.) s\u00fcrekli olarak izler ve belirli bir e\u015fi\u011fi a\u015fan IP adreslerini otomatik olarak engeller. Bu, \u00f6zellikle brute-force sald\u0131r\u0131lar\u0131na kar\u015f\u0131 son derece etkili bir koruma sa\u011flar. Ayr\u0131ca, CSF, belirli \u00fclke IP’lerini engelleme, \u015f\u00fcpheli s\u00fcre\u00e7leri izleme, dizin de\u011fi\u015fikliklerini kontrol etme ve detayl\u0131 e-posta uyar\u0131lar\u0131 g\u00f6nderme gibi geli\u015fmi\u015f yeteneklere de sahiptir. Bu makalede, Ubuntu i\u015fletim sistemi \u00fczerinde CSF’nin nas\u0131l kurulaca\u011f\u0131n\u0131, temel ve geli\u015fmi\u015f ayarlar\u0131n\u0131n nas\u0131l yap\u0131land\u0131r\u0131laca\u011f\u0131n\u0131 ve g\u00fcnl\u00fck kullan\u0131mda kar\u015f\u0131la\u015fabilece\u011finiz durumlar\u0131 ele alaca\u011f\u0131z. Amac\u0131m\u0131z, sunucunuzun g\u00fcvenli\u011fini en \u00fcst d\u00fczeye \u00e7\u0131karmak i\u00e7in CSF’yi etkili bir \u015fekilde kullanman\u0131z\u0131 sa\u011flamakt\u0131r.<\/p>\n

\u00d6n Ko\u015fullar: Ba\u015flamadan \u00d6nce Bilmeniz Gerekenler<\/h3>\n

CSF kurulumuna ba\u015flamadan \u00f6nce, sunucunuzun belirli gereksinimleri kar\u015f\u0131lad\u0131\u011f\u0131ndan ve baz\u0131 \u00f6n haz\u0131rl\u0131klar\u0131n yap\u0131ld\u0131\u011f\u0131ndan emin olman\u0131z \u00f6nemlidir. Bu ad\u0131mlar, kurulum s\u00fcrecinin sorunsuz ilerlemesini sa\u011flayacak ve olas\u0131 \u00e7ak\u0131\u015fmalar\u0131 \u00f6nleyecektir.<\/p>\n

Ubuntu \u0130\u015fletim Sistemi<\/h4>\n

Bu rehber, Ubuntu sunucular\u0131 i\u00e7in yaz\u0131lm\u0131\u015ft\u0131r. Genellikle g\u00fcncel LTS (Uzun S\u00fcreli Destek) s\u00fcr\u00fcmleri (\u00f6rne\u011fin Ubuntu 20.04 LTS veya 22.04 LTS) \u00f6nerilir. CSF, \u00e7o\u011fu Linux da\u011f\u0131t\u0131m\u0131nda \u00e7al\u0131\u015fsa da, komutlar ve paket y\u00f6neticisi (apt) Ubuntu’ya \u00f6zeldir.<\/p>\n

Root veya Sudo Yetkileri<\/h4>\n

Kurulum ve yap\u0131land\u0131rma i\u015flemleri, sistem dosyalar\u0131nda de\u011fi\u015fiklik yapmay\u0131 gerektirdi\u011finden, root kullan\u0131c\u0131s\u0131 olarak oturum a\u00e7m\u0131\u015f olman\u0131z veya sudo<\/code> komutunu kullanma yetkisine sahip bir kullan\u0131c\u0131 olman\u0131z gerekmektedir. G\u00fcvenlik a\u00e7\u0131s\u0131ndan sudo<\/code> kullan\u0131lmas\u0131 genellikle daha iyi bir uygulamad\u0131r.<\/p>\n

Temel Linux Komut Sat\u0131r\u0131 Bilgisi<\/h4>\n

CSF’nin kurulumu ve y\u00f6netimi tamamen komut sat\u0131r\u0131 \u00fczerinden ger\u00e7ekle\u015fecektir. Temel Linux komutlar\u0131 (cd, ls, cp, mv, nano veya vi gibi metin d\u00fczenleyicileri) hakk\u0131nda bilgi sahibi olman\u0131z gerekmektedir.<\/p>\n

Mevcut G\u00fcvenlik Duvar\u0131 Kontrol\u00fc (UFW)<\/h4>\n

Ubuntu sunucular\u0131nda genellikle varsay\u0131lan olarak UFW (Uncomplicated Firewall) y\u00fckl\u00fc gelir. CSF, kendi g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 y\u00f6netti\u011fi i\u00e7in, UFW ile \u00e7ak\u0131\u015fmalar\u0131 \u00f6nlemek ad\u0131na UFW’yi devre d\u0131\u015f\u0131 b\u0131rakman\u0131z veya tamamen kald\u0131rman\u0131z \u00f6nerilir.
\nUFW’nin durumunu kontrol etmek i\u00e7in:<\/p>\n

sudo ufw status<\/code><\/pre>\n
E\u011fer UFW aktifse, devre d\u0131\u015f\u0131 b\u0131rakmak i\u00e7in:<\/p>\n
sudo ufw disable<\/code><\/pre>\n
UFW’yi tamamen kald\u0131rmak isterseniz (iste\u011fe ba\u011fl\u0131):<\/p>\n
sudo apt purge ufw<\/code><\/pre>\n
Bu ad\u0131m\u0131 atlaman\u0131z durumunda, CSF’nin kurallar\u0131 UFW taraf\u0131ndan engellenebilir veya beklenmedik davran\u0131\u015flar sergilenebilir.<\/p>\n
\u0130nternet Ba\u011flant\u0131s\u0131<\/h4>\n
CSF paketlerini indirmek i\u00e7in sunucunuzun aktif bir internet ba\u011flant\u0131s\u0131na sahip olmas\u0131 gerekmektedir.<\/p>\n
Bu \u00f6n ko\u015fullar\u0131 sa\u011flad\u0131ktan sonra, CSF kurulumuna g\u00fcvenle ge\u00e7ebilirsiniz.<\/p>\n
CSF Kurulumu: Ad\u0131m Ad\u0131m Rehber<\/h3>\n
CSF’nin Ubuntu sunucunuza kurulumu olduk\u00e7a basittir ve birka\u00e7 komutla tamamlanabilir. \u0130\u015fte ad\u0131m ad\u0131m kurulum s\u00fcreci:<\/p>\n
Sistem G\u00fcncellemesi ve Gerekli Ba\u011f\u0131ml\u0131l\u0131klar\u0131n Kurulumu<\/h4>\n
Kuruluma ba\u015flamadan \u00f6nce, sisteminizin g\u00fcncel oldu\u011fundan ve CSF’nin ihtiya\u00e7 duydu\u011fu temel ba\u011f\u0131ml\u0131l\u0131klar\u0131n y\u00fckl\u00fc oldu\u011fundan emin olal\u0131m.<\/p>\n
1.  Sistemi G\u00fcncelleme:<\/strong><\/p>\n
sudo apt update && sudo apt upgrade -y<\/code><\/pre>\n
    Bu komut, paket listelerini g\u00fcnceller ve mevcut t\u00fcm paketleri en son s\u00fcr\u00fcmlerine y\u00fckseltir.<\/p>\n
2.  Gerekli Ba\u011f\u0131ml\u0131l\u0131klar\u0131 Kurma:<\/strong>
\n    CSF, Perl tabanl\u0131 bir uygulama oldu\u011fu i\u00e7in baz\u0131 Perl mod\u00fcllerine ve di\u011fer yard\u0131mc\u0131 programlara ihtiya\u00e7 duyar.<\/p>\n
sudo apt install -y wget perl libwww-perl liblwp-protocol-https-perl unzip<\/code><\/pre>\n
    *   wget<\/code>: Dosyalar\u0131 internetten indirmek i\u00e7in kullan\u0131l\u0131r.
\n    *   perl<\/code>: CSF’nin \u00e7al\u0131\u015ft\u0131\u011f\u0131 betik dilidir.
\n    *   libwww-perl<\/code> ve liblwp-protocol-https-perl<\/code>: Perl’in web istekleri yapmas\u0131n\u0131 sa\u011flayan k\u00fct\u00fcphanelerdir.
\n    *   unzip<\/code>: S\u0131k\u0131\u015ft\u0131r\u0131lm\u0131\u015f dosyalar\u0131 a\u00e7mak i\u00e7in kullan\u0131l\u0131r (tar.gz i\u00e7in tar<\/code> yeterli olsa da, genel bir ba\u011f\u0131ml\u0131l\u0131k olarak eklemek faydal\u0131d\u0131r).<\/p>\n
    CSF’nin e-posta bildirimleri g\u00f6nderebilmesi i\u00e7in bir posta aktar\u0131m arac\u0131s\u0131 (MTA) y\u00fckl\u00fc olmas\u0131 gerekir. Genellikle sendmail<\/code> veya postfix<\/code> kullan\u0131l\u0131r.<\/p>\n
sudo apt install -y sendmail\n    # veya\n    # sudo apt install -y postfix<\/code><\/pre>\n
    E\u011fer sunucunuz bir mail sunucusu de\u011filse, sendmail<\/code> kurulumu genellikle daha basittir ve sadece CSF’nin bildirimleri i\u00e7in yeterlidir. Kurulum s\u0131ras\u0131nda baz\u0131 yap\u0131land\u0131rma se\u00e7enekleri sorulabilir; varsay\u0131lanlar\u0131 kabul edebilirsiniz.<\/p>\n
CSF Paketini \u0130ndirme ve Kurma<\/h4>\n
\u015eimdi CSF’nin kendisini indirip kurma zaman\u0131.<\/p>\n
1.  Ge\u00e7ici Dizin Olu\u015fturma ve CSF’yi \u0130ndirme:<\/strong>
\n    Genellikle \/usr\/local\/src<\/code> dizini, kaynak koddan kurulan yaz\u0131l\u0131mlar i\u00e7in kullan\u0131l\u0131r.<\/p>\n
cd \/usr\/local\/src\/\n    sudo wget https:\/\/download.configserver.com\/csf.tgz<\/code><\/pre>\n
    Bu komut, CSF’nin en son s\u00fcr\u00fcm\u00fcn\u00fc belirtilen adresten indirir.<\/p>\n
2.  CSF Paketini \u00c7\u0131kartma:<\/strong>
\n    \u0130ndirdi\u011finiz csf.tgz<\/code> dosyas\u0131n\u0131 a\u00e7\u0131n.<\/p>\n
sudo tar -xzf csf.tgz<\/code><\/pre>\n
    Bu, csf<\/code> ad\u0131nda yeni bir dizin olu\u015fturacakt\u0131r.<\/p>\n
3.  CSF Dizinine Girme:<\/strong><\/p>\n
cd csf<\/code><\/pre>\n
4.  Kurulum Beti\u011fini \u00c7al\u0131\u015ft\u0131rma:<\/strong>
\n    \u015eimdi CSF’yi sisteminize kuracak olan beti\u011fi \u00e7al\u0131\u015ft\u0131r\u0131n.<\/p>\n
sudo sh install.sh<\/code><\/pre>\n
    Bu betik, CSF dosyalar\u0131n\u0131 uygun yerlere kopyalayacak, gerekli izinleri ayarlayacak ve CSF ile LFD servislerini ba\u015flatacakt\u0131r. Kurulum tamamland\u0131\u011f\u0131nda, size baz\u0131 bilgiler verecektir, \u00f6rne\u011fin yap\u0131land\u0131rma dosyas\u0131n\u0131n konumu (\/etc\/csf\/csf.conf<\/code>).<\/p>\n
Kurulumu Do\u011frulama ve Test Etme<\/h4>\n
Kurulumun ba\u015far\u0131l\u0131 olup olmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in CSF’nin kendi test beti\u011fini kullanabilirsiniz.<\/p>\n
sudo perl \/usr\/local\/csf\/bin\/csftest.pl<\/code><\/pre>\n
Bu komut, sunucunuzun CSF’nin t\u00fcm gereksinimlerini kar\u015f\u0131lay\u0131p kar\u015f\u0131lamad\u0131\u011f\u0131n\u0131 kontrol eder. E\u011fer “RESULT: csf and lfd have been installed and configured.” gibi bir \u00e7\u0131kt\u0131 al\u0131rsan\u0131z ve herhangi bir b\u00fcy\u00fck hata g\u00f6rmezseniz, kurulum ba\u015far\u0131l\u0131 demektir. \u00d6zellikle “TESTING” modunun a\u00e7\u0131k oldu\u011funa dair bir uyar\u0131 alabilirsiniz, bu normaldir ve bir sonraki ad\u0131mda kapat\u0131lacakt\u0131r.<\/p>\n
Kurulumdan sonra, CSF ve LFD servislerinin \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olmak i\u00e7in durumlar\u0131n\u0131 kontrol edebilirsiniz:<\/p>\n
sudo systemctl status csf\nsudo systemctl status lfd<\/code><\/pre>\n
Her ikisi de active (exited)<\/code> veya active (running)<\/code> olarak g\u00f6r\u00fcnmelidir. exited<\/code> olmas\u0131 normaldir \u00e7\u00fcnk\u00fc CSF, kurallar\u0131 uygulad\u0131ktan sonra \u00e7\u0131k\u0131\u015f yapar ve LFD ise s\u00fcrekli \u00e7al\u0131\u015f\u0131r.<\/p>\n
Bu ad\u0131mlarla CSF’yi Ubuntu sunucunuza ba\u015far\u0131yla kurmu\u015f olursunuz. \u015eimdi s\u0131ra, onu sunucunuzun ihtiya\u00e7lar\u0131na g\u00f6re yap\u0131land\u0131rmaya geldi.<\/p>\n
Temel Yap\u0131land\u0131rma: G\u00fcvenlik Duvar\u0131n\u0131z\u0131 Ki\u015fiselle\u015ftirme<\/h3>\n
CSF kurulduktan sonra, varsay\u0131lan ayarlar\u0131 genellikle \u00e7ok k\u0131s\u0131tlay\u0131c\u0131d\u0131r veya sunucunuzun \u00f6zel ihtiya\u00e7lar\u0131n\u0131 kar\u015f\u0131lamayabilir. Bu nedenle, csf.conf<\/code> dosyas\u0131n\u0131 d\u00fczenleyerek g\u00fcvenlik duvar\u0131n\u0131z\u0131 yap\u0131land\u0131rman\u0131z gerekmektedir.<\/p>\n
csf.conf<\/code> Dosyas\u0131na Eri\u015fim<\/h4>\n
CSF’nin ana yap\u0131land\u0131rma dosyas\u0131 \/etc\/csf\/csf.conf<\/code> konumundad\u0131r. Bu dosyay\u0131 bir metin d\u00fczenleyici ile a\u00e7arak d\u00fczenleyebilirsiniz. nano<\/code> kullanmak genellikle en kolay yoldur:<\/p>\n
sudo nano \/etc\/csf\/csf.conf<\/code><\/pre>\n
Bu dosya i\u00e7inde bir\u00e7ok ayar bulunmaktad\u0131r. \u00d6nemli olanlar\u0131 ad\u0131m ad\u0131m g\u00f6zden ge\u00e7irelim.<\/p>\n
TESTING Modunu Kapatma<\/h4>\n
Kurulumdan sonra CSF varsay\u0131lan olarak “TESTING” modunda \u00e7al\u0131\u015f\u0131r. Bu mod, yanl\u0131\u015f yap\u0131land\u0131rma sonucu kendinizi sunucudan kilitlemenizi \u00f6nlemek i\u00e7in tasarlanm\u0131\u015ft\u0131r. T\u00fcm ayarlar\u0131n\u0131z\u0131 yapt\u0131ktan sonra bu modu kapatman\u0131z gerekir.
\nDosya i\u00e7inde a\u015fa\u011f\u0131daki sat\u0131r\u0131 bulun:<\/p>\n
TESTING = \"1\"<\/code><\/pre>\n
Ve “0” olarak de\u011fi\u015ftirin:<\/p>\n
TESTING = \"0\"<\/code><\/pre>\n
Bu de\u011fi\u015fikli\u011fi yapmadan \u00f6nce, SSH ba\u011flant\u0131n\u0131z\u0131n kesilmesi durumunda sunucuya eri\u015fim sa\u011flayabilece\u011finiz ba\u015fka bir y\u00f6ntem (\u00f6rne\u011fin konsol eri\u015fimi veya farkl\u0131 bir IP’den SSH) oldu\u011fundan emin olun.<\/p>\n
Gelen (Inbound) ve Giden (Outbound) Portlar\u0131 Yap\u0131land\u0131rma<\/h4>\n
Bu, CSF yap\u0131land\u0131rmas\u0131n\u0131n en kritik b\u00f6l\u00fcm\u00fcd\u00fcr. Sunucunuzun hangi servislere eri\u015fime izin verece\u011fini ve hangi portlar \u00fczerinden ileti\u015fim kuraca\u011f\u0131n\u0131 belirlersiniz. Yaln\u0131zca kesinlikle gerekli olan portlar\u0131 a\u00e7maya \u00f6zen g\u00f6sterin.<\/p>\n
*   TCP Gelen Portlar (TCP_IN):<\/strong> \u0130nternet’ten sunucunuza gelen ba\u011flant\u0131lar i\u00e7in izin verilen TCP portlar\u0131.<\/p>\n
TCP_IN = \"20,21,22,25,53,80,110,143,443,465,587,993,995,3306\"<\/code><\/pre>\n
    Yayg\u0131n kullan\u0131lan portlar ve anlamlar\u0131:
\n    *   20, 21<\/code>: FTP (Dosya Aktar\u0131m Protokol\u00fc)
\n    *   22<\/code>: SSH (G\u00fcvenli Kabuk – Sunucuya uzaktan eri\u015fim)
\n    *   25<\/code>: SMTP (Basit Posta Aktar\u0131m Protokol\u00fc – E-posta g\u00f6nderme)
\n    *   53<\/code>: DNS (Alan Ad\u0131 Sistemi – Alan ad\u0131 \u00e7\u00f6z\u00fcmlemesi)
\n    *   80<\/code>: HTTP (Web sunucusu – \u015eifresiz web trafi\u011fi)
\n    *   110<\/code>: POP3 (Postane Protokol\u00fc s\u00fcr\u00fcm 3 – E-posta alma)
\n    *   143<\/code>: IMAP (\u0130nternet Mesaj Eri\u015fim Protokol\u00fc – E-posta alma)
\n    *   443<\/code>: HTTPS (G\u00fcvenli HTTP – \u015eifreli web trafi\u011fi)
\n    *   465<\/code>: SMTPS (G\u00fcvenli SMTP)
\n    *   587<\/code>: Submission (SMTP mesaj g\u00f6nderme)
\n    *   993<\/code>: IMAPS (G\u00fcvenli IMAP)
\n    *   995<\/code>: POP3S (G\u00fcvenli POP3)
\n    *   3306<\/code>: MySQL\/MariaDB (Veritaban\u0131 sunucusu)
\n    *   5432<\/code>: PostgreSQL (Veritaban\u0131 sunucusu)
\n    *   8080<\/code>: Alternatif HTTP portu (genellikle Tomcat, Jenkins vb.)<\/p>\n
    \u00d6nemli:<\/strong> E\u011fer sunucunuzda sadece bir web sitesi bar\u0131nd\u0131r\u0131yorsan\u0131z ve e-posta sunucusu olarak kullanm\u0131yorsan\u0131z, e-posta ile ilgili portlar\u0131 (25, 110, 143, 465, 587, 993, 995) a\u00e7man\u0131za gerek yoktur. SSH i\u00e7in varsay\u0131lan port olan 22’yi de\u011fi\u015ftirmeyi d\u00fc\u015f\u00fcn\u00fcn, bu yayg\u0131n bir g\u00fcvenlik uygulamas\u0131d\u0131r. E\u011fer de\u011fi\u015ftirirseniz, TCP_IN<\/code> listesinde de yeni port numaras\u0131n\u0131 belirtmeyi unutmay\u0131n.<\/p>\n
*   TCP Giden Portlar (TCP_OUT):<\/strong> Sunucunuzdan internete giden ba\u011flant\u0131lar i\u00e7in izin verilen TCP portlar\u0131.<\/p>\n
TCP_OUT = \"20,21,22,25,53,80,110,113,443,465,587,993,995,3306\"<\/code><\/pre>\n
    Bu ayarlar genellikle TCP_IN<\/code> ile benzer olabilir, ancak sunucunuzun d\u0131\u015far\u0131ya hangi servislere ba\u011flanmas\u0131 gerekti\u011fini d\u00fc\u015f\u00fcnmelisiniz. \u00d6rne\u011fin, bir veritaban\u0131 sunucusuna veya bir API’ye ba\u011flanmas\u0131 gerekiyorsa o portlar\u0131 a\u00e7mal\u0131s\u0131n\u0131z.<\/p>\n
*   UDP Gelen Portlar (UDP_IN):<\/strong> UDP trafi\u011fi i\u00e7in gelen portlar.<\/p>\n
UDP_IN = \"20,21,53\"<\/code><\/pre>\n
    *   53<\/code>: DNS (Alan Ad\u0131 Sistemi) – Hem TCP hem de UDP kullan\u0131r.
\n    *   20, 21<\/code>: FTP (Pasif mod i\u00e7in bazen UDP kullan\u0131l\u0131r)<\/p>\n
*   UDP Giden Portlar (UDP_OUT):<\/strong> UDP trafi\u011fi i\u00e7in giden portlar.<\/p>\n
UDP_OUT = \"20,21,53,113,123\"<\/code><\/pre>\n
    *   123<\/code>: NTP (A\u011f Zaman Protokol\u00fc – Zaman senkronizasyonu)<\/p>\n
LFD (Login Failure Daemon) Yap\u0131land\u0131rmas\u0131<\/h4>\n
LFD, CSF’nin en g\u00fc\u00e7l\u00fc \u00f6zelliklerinden biridir ve ba\u015far\u0131s\u0131z oturum a\u00e7ma denemelerini izleyerek brute-force sald\u0131r\u0131lar\u0131n\u0131 engeller.<\/p>\n
*   SSH Brute-Force Korumas\u0131:<\/strong><\/p>\n
LF_SSHD = \"5\"\n    LF_SSHD_PERM = \"1\"<\/code><\/pre>\n
    LF_SSHD<\/code>: Belirli bir s\u00fcre i\u00e7inde (varsay\u0131lan olarak 1 saat) ka\u00e7 ba\u015far\u0131s\u0131z SSH denemesinden sonra IP’nin engellenece\u011fini belirler. 5<\/code> genellikle iyi bir ba\u015flang\u0131\u00e7 de\u011feridir.
\n    LF_SSHD_PERM<\/code>: E\u011fer 1<\/code> olarak ayarlan\u0131rsa, LFD taraf\u0131ndan engellenen IP’ler kal\u0131c\u0131 olarak kara listeye al\u0131n\u0131r. 0<\/code> ise ge\u00e7ici engelleme yapar. Kal\u0131c\u0131 engelleme genellikle daha g\u00fcvenlidir.<\/p>\n
*   FTP Brute-Force Korumas\u0131:<\/strong><\/p>\n
LF_FTPD = \"5\"\n    LF_FTPD_PERM = \"1\"<\/code><\/pre>\n
    Benzer \u015fekilde FTP i\u00e7in ba\u015far\u0131s\u0131z deneme say\u0131s\u0131 ve kal\u0131c\u0131 engelleme ayar\u0131.<\/p>\n
*   E-posta Protokolleri (POP3, IMAP, SMTP AUTH) Korumas\u0131:<\/strong><\/p>\n
LF_POP3D = \"5\"\n    LF_IMAPD = \"5\"\n    LF_SMTPAUTH = \"5\"<\/code><\/pre>\n
    Bu ayarlar, ilgili e-posta servisleri i\u00e7in ba\u015far\u0131s\u0131z oturum a\u00e7ma denemelerini izler.<\/p>\n
*   Genel LFD Ayarlar\u0131:<\/strong><\/p>\n
LF_TRIGGER = \"10\"\n    LF_INTERVAL = \"3600\"<\/code><\/pre>\n
    LF_TRIGGER<\/code>: Belirli bir s\u00fcre i\u00e7inde (LF_INTERVAL) toplamda ka\u00e7 ba\u015far\u0131s\u0131z oturum a\u00e7ma denemesinden sonra IP’nin engellenece\u011fini belirler.
\n    LF_INTERVAL<\/code>: LFD’nin ba\u015far\u0131s\u0131z denemeleri ne kadar s\u00fcreyle izleyece\u011fini saniye cinsinden belirtir (3600 saniye = 1 saat).<\/p>\n
*   E-posta Uyar\u0131lar\u0131:<\/strong>
\n    LFD, bir IP engelledi\u011finde size e-posta ile bildirim g\u00f6nderebilir.<\/p>\n
LF_ALERT_TO = \"senin@emailadresin.com\"\n    LF_ALERT_FROM = \"csf@sunucuadiniz.com\"<\/code><\/pre>\n
    LF_ALERT_TO<\/code>: Uyar\u0131lar\u0131n g\u00f6nderilece\u011fi e-posta adresi.
\n    LF_ALERT_FROM<\/code>: Uyar\u0131lar\u0131n g\u00f6nderilece\u011fi e-posta adresi (sunucu ad\u0131 veya ba\u015fka bir adres olabilir).<\/p>\n
Di\u011fer \u00d6nemli Ayarlar<\/h4>\n
*   RESTRICT_SYSLOG:<\/strong> Syslog eri\u015fimini k\u0131s\u0131tlar. G\u00fcvenlik i\u00e7in 1<\/code> olarak ayarlanmas\u0131 \u00f6nerilir.<\/p>\n
RESTRICT_SYSLOG = \"1\"<\/code><\/pre>\n
*   PS_LIMIT:<\/strong> Sunucunuzda \u00e7al\u0131\u015fan kullan\u0131c\u0131 s\u00fcre\u00e7lerini izler ve belirli bir limitin \u00fczerinde kaynak t\u00fcketen s\u00fcre\u00e7leri sonland\u0131rabilir. Bu, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n veya hatal\u0131 uygulamalar\u0131n sunucuyu yava\u015flatmas\u0131n\u0131 \u00f6nleyebilir.<\/p>\n
PS_LIMIT = \"20\"<\/code><\/pre>\n
    Bu de\u011feri sunucunuzun kullan\u0131m\u0131na g\u00f6re ayarlay\u0131n.<\/p>\n
*   PORTFLOOD:<\/strong> Belirli bir IP’den belirli bir porta gelen ba\u011flant\u0131 say\u0131s\u0131n\u0131 s\u0131n\u0131rlar. Bu, port taramas\u0131 veya DoS sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma sa\u011flar.<\/p>\n
PORTFLOOD = \"22;5;300,80;20;5\"<\/code><\/pre>\n
    Format: PORT;BA\u011eLANTI_SAYISI;S\u00dcRE_SAN\u0130YE<\/code>. \u00d6rne\u011fin, 22;5;300<\/code> SSH portuna 300 saniye i\u00e7inde 5’ten fazla ba\u011flant\u0131 denemesi yapan IP’leri engeller.<\/p>\n
*   SYNFLOOD:<\/strong> SYN flood sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma sa\u011flar.<\/p>\n
SYNFLOOD = \"1\"\n    SYNFLOOD_RATE = \"100\/s\"\n    SYNFLOOD_BURST = \"20\"<\/code><\/pre>\n
    Bu de\u011ferler, sald\u0131r\u0131n\u0131n \u015fiddetine g\u00f6re ayarlanmal\u0131d\u0131r.<\/p>\n
*   CC_DENY (\u00dclke Engelleme):<\/strong> Belirli \u00fclke IP’lerinden gelen t\u00fcm ba\u011flant\u0131lar\u0131 engeller.<\/p>\n
CC_DENY = \"\"<\/code><\/pre>\n
    \u00d6rne\u011fin, CC_DENY = \"CN,RU,KP\"<\/code> \u00c7in, Rusya ve Kuzey Kore’den gelen t\u00fcm ba\u011flant\u0131lar\u0131 engeller. \u00dclke kodlar\u0131n\u0131 ISO 3166-1 alpha-2 format\u0131nda bulabilirsiniz. Bu, hedefli sald\u0131r\u0131lar\u0131 azaltmak i\u00e7in etkili olabilir, ancak yasal kullan\u0131c\u0131lar\u0131 da engelleyebilir.<\/p>\n
*   SMTP_BLOCK:<\/strong> Sunucunuz bir mail sunucusu de\u011filse, d\u0131\u015far\u0131ya giden SMTP trafi\u011fini engellemek, sunucunuzun spam g\u00f6ndermek i\u00e7in kullan\u0131lmas\u0131n\u0131 \u00f6nleyebilir.<\/p>\n
SMTP_BLOCK = \"1\"<\/code><\/pre>\n
    E\u011fer mail sunucusuysan\u0131z, bu ayar\u0131 0<\/code> olarak b\u0131rak\u0131n.<\/p>\n
De\u011fi\u015fiklikleri Kaydetme ve CSF’yi Yeniden Ba\u015flatma<\/h4>\n
csf.conf<\/code> dosyas\u0131nda yapt\u0131\u011f\u0131n\u0131z t\u00fcm de\u011fi\u015fiklikleri kaydettikten sonra (nano i\u00e7in CTRL+O<\/code>, Enter<\/code>, sonra CTRL+X<\/code>), CSF ve LFD servislerini yeniden ba\u015flatman\u0131z gerekir ki yeni kurallar uygulans\u0131n.<\/p>\n
sudo csf -r<\/code><\/pre>\n
Bu komut, hem CSF hem de LFD’yi yeniden ba\u015flat\u0131r ve yeni yap\u0131land\u0131rmay\u0131 devreye sokar. E\u011fer TESTING = \"1\"<\/code> durumundayken csf -r<\/code> komutunu \u00e7al\u0131\u015ft\u0131r\u0131rsan\u0131z, CSF otomatik olarak kendini devre d\u0131\u015f\u0131 b\u0131rak\u0131r ve 5 dakika sonra yeniden aktif hale gelir. Bu, yanl\u0131\u015fl\u0131kla kendinizi kilitlemenize kar\u015f\u0131 bir \u00f6nlemdir. TESTING = \"0\"<\/code> olarak ayarlad\u0131ktan sonra bu \u00f6zellik devre d\u0131\u015f\u0131 kal\u0131r.<\/p>\n
Geli\u015fmi\u015f Yap\u0131land\u0131rma ve Kullan\u0131m: CSF’nin G\u00fcc\u00fcn\u00fc Ke\u015ffedin<\/h3>\n
CSF, temel port ve LFD ayarlar\u0131n\u0131n \u00f6tesinde, sunucunuzun g\u00fcvenli\u011fini daha da art\u0131rmak i\u00e7in bir\u00e7ok geli\u015fmi\u015f \u00f6zellik sunar. Bu b\u00f6l\u00fcmde, bu \u00f6zelliklerin baz\u0131lar\u0131na ve CSF’yi g\u00fcnl\u00fck olarak nas\u0131l y\u00f6netece\u011finize odaklanaca\u011f\u0131z.<\/p>\n
IP Adresi Y\u00f6netimi: \u0130zin Verme ve Engelleme<\/h4>\n
CSF, belirli IP adreslerini manuel olarak izin verilenler veya engellenenler listesine eklemenizi sa\u011flar. Bu, belirli bir IP’den gelen sald\u0131r\u0131lar\u0131 durdurmak veya belirli bir kullan\u0131c\u0131n\u0131n her zaman eri\u015fimini sa\u011flamak i\u00e7in kullan\u0131\u015fl\u0131d\u0131r.<\/p>\n
*   Bir IP Adresine \u0130zin Verme (Whitelist):<\/strong><\/p>\n
sudo csf -a 192.168.1.100 \"Kullan\u0131c\u0131 Ad\u0131\"<\/code><\/pre>\n
    Bu komut, 192.168.1.100<\/code> IP adresini izin verilenler listesine ekler. A\u00e7\u0131klama (\"Kullan\u0131c\u0131 Ad\u0131\"<\/code>) iste\u011fe ba\u011fl\u0131d\u0131r ancak y\u00f6netimi kolayla\u015ft\u0131r\u0131r. \u0130zin verilen IP’ler \/etc\/csf\/csf.allow<\/code> dosyas\u0131nda saklan\u0131r.<\/p>\n
*   Bir IP Adresini Engelleme (Blacklist):<\/strong><\/p>\n
sudo csf -d 192.168.1.101 \"Sald\u0131rgan IP\"<\/code><\/pre>\n
    Bu komut, 192.168.1.101<\/code> IP adresini engellenenler listesine ekler. Engellenen IP’ler \/etc\/csf\/csf.deny<\/code> dosyas\u0131nda saklan\u0131r.<\/p>\n
*   \u0130zin Verilen IP’yi Kald\u0131rma:<\/strong><\/p>\n
sudo csf -ar 192.168.1.100<\/code><\/pre>\n
*   Engellenen IP’yi Kald\u0131rma:<\/strong><\/p>\n
sudo csf -dr 192.168.1.101<\/code><\/pre>\n
*   Bir IP Adresinin Durumunu Kontrol Etme:<\/strong><\/p>\n
sudo csf -g 192.168.1.101<\/code><\/pre>\n
    Bu komut, belirtilen IP adresinin CSF kurallar\u0131 taraf\u0131ndan nas\u0131l ele al\u0131nd\u0131\u011f\u0131n\u0131 (izinli mi, engellenmi\u015f mi, ge\u00e7ici olarak engellenmi\u015f mi) g\u00f6sterir.<\/p>\n
*   Ge\u00e7ici Engelleme:<\/strong>
\n    Belirli bir IP adresini belirli bir s\u00fcre i\u00e7in engellemek isteyebilirsiniz.<\/p>\n
sudo csf -t 192.168.1.102 3600 \"Ge\u00e7ici Engelleme\"<\/code><\/pre>\n
    Bu komut, 192.168.1.102<\/code> IP adresini 3600 saniye (1 saat) boyunca engeller. S\u00fcre doldu\u011funda engelleme otomatik olarak kalkar.<\/p>\n
*   T\u00fcm Ge\u00e7ici Engellemeleri Kald\u0131rma:<\/strong><\/p>\n
sudo csf -tf<\/code><\/pre>\n
\u0130\u015flem Takibi (Process Tracking)<\/h4>\n
CSF, sunucunuzda \u00e7al\u0131\u015fan s\u00fcre\u00e7leri izleyebilir ve belirli kullan\u0131c\u0131lar\u0131n veya belirli kaynaklar\u0131 a\u015fan s\u00fcre\u00e7leri sonland\u0131rabilir. Bu, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n veya hatal\u0131 yap\u0131land\u0131r\u0131lm\u0131\u015f uygulamalar\u0131n sunucuyu ele ge\u00e7irmesini veya kaynaklar\u0131 s\u00f6m\u00fcrmesini \u00f6nler.<\/p>\n
*   csf.conf<\/code> dosyas\u0131nda PT_USER<\/code> ve PT_LIMIT<\/code> ayarlar\u0131n\u0131 kullan\u0131n:<\/p>\n
PT_USER = \"www-data,nobody\"\n    PT_LIMIT = \"20\"<\/code><\/pre>\n
    PT_USER<\/code>: \u0130zlenecek kullan\u0131c\u0131 adlar\u0131n\u0131 belirtir.
\n    PT_LIMIT<\/code>: Bu kullan\u0131c\u0131lar\u0131n \u00e7al\u0131\u015ft\u0131rabilece\u011fi maksimum s\u00fcre\u00e7 say\u0131s\u0131n\u0131 veya kaynak kullan\u0131m\u0131n\u0131 belirler. Ayr\u0131nt\u0131l\u0131 yap\u0131land\u0131rma i\u00e7in csf.conf<\/code> dosyas\u0131ndaki ilgili yorumlar\u0131 inceleyin.<\/p>\n
Dizin \u0130zleme (DIRWATCH)<\/h4>\n
DIRWATCH<\/code> \u00f6zelli\u011fi, belirli dizinlerdeki de\u011fi\u015fiklikleri izler ve \u015f\u00fcpheli bir de\u011fi\u015fiklik alg\u0131land\u0131\u011f\u0131nda uyar\u0131 g\u00f6nderir. Bu, web sitenizin veya kritik sistem dosyalar\u0131n\u0131z\u0131n yetkisiz de\u011fi\u015fikliklere kar\u015f\u0131 korunmas\u0131na yard\u0131mc\u0131 olur.<\/p>\n
*   csf.conf<\/code> dosyas\u0131nda DIRWATCH<\/code> ayar\u0131n\u0131 etkinle\u015ftirin ve izlenecek dizinleri belirtin:<\/p>\n
DIRWATCH = \"1\"\n    DIRWATCH_INTERVAL = \"300\"\n    DIRWATCH_DELAY = \"10\"\n    DIRWATCH_OPTS = \"3\"\n    DIRWATCH_EXCLUDE = \"\/tmp,\/var\/tmp\"<\/code><\/pre>\n
    DIRWATCH_DIR = \"\/var\/www\/html,\/etc\/passwd\"<\/code> gibi sat\u0131rlar ekleyerek izlenecek dizinleri belirleyebilirsiniz.<\/p>\n
Port Knocking<\/h4>\n
Port knocking, sunucunuza g\u00fcvenli bir \u015fekilde eri\u015fmek i\u00e7in ek bir g\u00fcvenlik katman\u0131 sa\u011flar. Belirli bir s\u0131rayla belirli portlara yap\u0131lan ba\u011flant\u0131 denemeleri, gizli bir portun (\u00f6rne\u011fin SSH portu) ge\u00e7ici olarak a\u00e7\u0131lmas\u0131n\u0131 tetikler.<\/p>\n
*   csf.conf<\/code> dosyas\u0131nda PORTKNOCKING<\/code> b\u00f6l\u00fcm\u00fcn\u00fc bulun.<\/p>\n
PORTKNOCKING = \"22;TCP;1000,2000,3000\"<\/code><\/pre>\n
    Bu \u00f6rnekte, \u00f6nce 1000, sonra 2000, sonra 3000 numaral\u0131 TCP portlar\u0131na ba\u011flan\u0131ld\u0131\u011f\u0131nda (belirli bir s\u00fcre i\u00e7inde), 22 numaral\u0131 SSH portu a\u00e7\u0131lacakt\u0131r.<\/p>\n
Country Code Blocking (\u00dclke Kodu Engelleme)<\/h4>\n
csf.conf<\/code> dosyas\u0131ndaki CC_DENY<\/code> ayar\u0131 ile belirli \u00fclkelerden gelen t\u00fcm ba\u011flant\u0131lar\u0131 engelleyebilirsiniz. Bu, \u00f6zellikle belirli co\u011frafi b\u00f6lgelerden gelen yo\u011fun sald\u0131r\u0131larla kar\u015f\u0131la\u015f\u0131ld\u0131\u011f\u0131nda faydal\u0131d\u0131r.<\/p>\n
CC_DENY = \"CN,RU,IR\"<\/code><\/pre>\n
Bu ayar, \u00c7in, Rusya ve \u0130ran’dan gelen t\u00fcm ba\u011flant\u0131lar\u0131 engeller. \u00dclke kodlar\u0131n\u0131 virg\u00fclle ay\u0131rarak ekleyebilirsiniz.<\/p>\n
CSF’yi Y\u00f6netme Komutlar\u0131<\/h4>\n
CSF’yi etkin bir \u015fekilde y\u00f6netmek i\u00e7in kullanabilece\u011finiz temel komutlar:<\/p>\n
*   CSF ve LFD’yi Yeniden Ba\u015flatma (Kurallar\u0131 Uygulama):<\/strong><\/p>\n
sudo csf -r<\/code><\/pre>\n
    Bu komut, csf.conf<\/code> ve di\u011fer yap\u0131land\u0131rma dosyalar\u0131ndaki t\u00fcm de\u011fi\u015fiklikleri uygular.<\/p>\n
*   CSF’nin Durumunu G\u00f6sterme:<\/strong><\/p>\n
sudo csf -s<\/code><\/pre>\n
    CSF’nin aktif olup olmad\u0131\u011f\u0131n\u0131, IPtables kurallar\u0131n\u0131 ve di\u011fer bilgileri g\u00f6sterir.<\/p>\n
*   IPtables Kurallar\u0131n\u0131 Temizleme (Flush):<\/strong><\/p>\n
sudo csf -f<\/code><\/pre>\n
    T\u00fcm CSF ve LFD kurallar\u0131n\u0131 s\u0131f\u0131rlar. Bu genellikle sorun giderme veya yeni bir ba\u015flang\u0131\u00e7 yapmak i\u00e7in kullan\u0131l\u0131r.<\/p>\n
*   CSF’yi Devre D\u0131\u015f\u0131 B\u0131rakma:<\/strong><\/p>\n
sudo csf -x<\/code><\/pre>\n
    CSF’yi ve LFD’yi durdurur ve t\u00fcm g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131r. Bu, \u00f6zellikle kendinizi kilitledi\u011finizde veya sunucunuzda a\u011f sorunlar\u0131 ya\u015fad\u0131\u011f\u0131n\u0131zda faydal\u0131d\u0131r.<\/p>\n
*   CSF’yi Etkinle\u015ftirme:<\/strong><\/p>\n
sudo csf -e<\/code><\/pre>\n
    Daha \u00f6nce devre d\u0131\u015f\u0131 b\u0131rak\u0131lan CSF’yi yeniden ba\u015flat\u0131r.<\/p>\n
*   CSF’yi G\u00fcncelleme:<\/strong><\/p>\n
sudo csf -u<\/code><\/pre>\n
    CSF yaz\u0131l\u0131m\u0131n\u0131 en son s\u00fcr\u00fcme g\u00fcnceller. G\u00fcvenlik yamalar\u0131 ve yeni \u00f6zellikler i\u00e7in d\u00fczenli olarak yap\u0131lmas\u0131 \u00f6nerilir.<\/p>\n
*   Loglar\u0131 G\u00f6r\u00fcnt\u00fcleme:<\/strong>
\n    CSF ve LFD’nin faaliyetlerini \/var\/log\/csf.log<\/code> ve \/var\/log\/lfd.log<\/code> dosyalar\u0131nda bulabilirsiniz.<\/p>\n
sudo tail -f \/var\/log\/lfd.log\n    sudo tail -f \/var\/log\/csf.log<\/code><\/pre>\n
    Bu komutlar, log dosyalar\u0131n\u0131n ger\u00e7ek zamanl\u0131 olarak g\u00fcncellenmesini izlemenizi sa\u011flar.<\/p>\n
*   CSF Yard\u0131m Men\u00fcs\u00fc:<\/strong><\/p>\n
sudo csf --help<\/code><\/pre>\n
    T\u00fcm mevcut komutlar\u0131 ve se\u00e7enekleri g\u00f6sterir.<\/p>\n
Bu geli\u015fmi\u015f \u00f6zellikler ve y\u00f6netim komutlar\u0131, CSF’yi sunucunuzun \u00f6zel g\u00fcvenlik ihtiya\u00e7lar\u0131na g\u00f6re uyarlaman\u0131za ve onu etkin bir \u015fekilde y\u00f6netmenize olanak tan\u0131r.<\/p>\n
Sorun Giderme ve En \u0130yi Uygulamalar<\/h3>\n
CSF g\u00fc\u00e7l\u00fc bir ara\u00e7 olsa da, yanl\u0131\u015f yap\u0131land\u0131rma veya beklenmedik durumlar sorunlara yol a\u00e7abilir. \u0130\u015fte kar\u015f\u0131la\u015fabilece\u011finiz baz\u0131 yayg\u0131n sorunlar ve en iyi uygulamalar:<\/p>\n
Kendinizi Sunucudan Kilitleme<\/h4>\n
Bu, g\u00fcvenlik duvar\u0131 yap\u0131land\u0131rmas\u0131nda yap\u0131lan en yayg\u0131n hatad\u0131r. \u00d6zellikle TESTING = \"0\"<\/code> olarak ayarlad\u0131ktan sonra yanl\u0131\u015f bir TCP_IN<\/code> ayar\u0131 sizi SSH \u00fczerinden sunucuya eri\u015fmekten al\u0131koyabilir.<\/p>\n
*   \u00c7\u00f6z\u00fcm:<\/strong>
\n    *   Konsol Eri\u015fimi:<\/strong> E\u011fer bir bulut sunucu kullan\u0131yorsan\u0131z, sa\u011flay\u0131c\u0131n\u0131z\u0131n paneli \u00fczerinden konsol eri\u015fimi (VNC veya Web Konsolu) kullanarak sunucuya do\u011frudan ba\u011flanabilirsiniz. Bu, a\u011f ayarlar\u0131ndan ba\u011f\u0131ms\u0131z olarak sunucuya eri\u015fim sa\u011flar.
\n    *   CSF’yi Devre D\u0131\u015f\u0131 B\u0131rakma:<\/strong> Konsol \u00fczerinden ba\u011flanarak sudo csf -x<\/code> komutunu \u00e7al\u0131\u015ft\u0131r\u0131n. Bu, CSF’yi devre d\u0131\u015f\u0131 b\u0131rak\u0131r ve t\u00fcm kurallar\u0131 kald\u0131r\u0131r. Ard\u0131ndan csf.conf<\/code> dosyas\u0131n\u0131 d\u00fczeltip tekrar etkinle\u015ftirebilirsiniz.
\n    *   Whitelisted IP Kullanma:<\/strong> E\u011fer beyaz listeye eklenmi\u015f (whitelist) farkl\u0131 bir IP adresiniz varsa, o IP’den ba\u011flanmay\u0131 deneyebilirsiniz.
\n    *   TESTING Modunun \u00d6nemi:<\/strong> Bu y\u00fczden TESTING = \"1\"<\/code> modunu kapatmadan \u00f6nce t\u00fcm ayarlar\u0131n\u0131z\u0131 dikkatlice kontrol etmeli ve kendinizi kilitlemeyecek bir y\u00f6nteminiz oldu\u011fundan emin olmal\u0131s\u0131n\u0131z.<\/p>\n
Ba\u011flant\u0131 Sorunlar\u0131<\/h4>\n
Belirli bir servise (\u00f6rne\u011fin web sitesi veya veritaban\u0131) eri\u015femiyorsan\u0131z, CSF’nin o portu engelliyor olmas\u0131 muhtemeldir.<\/p>\n
*   \u00c7\u00f6z\u00fcm:<\/strong>
\n    *   csf.conf<\/code> dosyas\u0131ndaki TCP_IN<\/code> ve UDP_IN<\/code> ayarlar\u0131n\u0131 kontrol edin. \u0130lgili portun a\u00e7\u0131k oldu\u011fundan emin olun.
\n    *   sudo csf -g <\/code> komutuyla kendi IP adresinizin CSF taraf\u0131ndan engellenip engellenmedi\u011fini kontrol edin.
\n    *   Sunucu \u00fczerindeki uygulama loglar\u0131n\u0131 kontrol edin. Uygulama, ba\u011flant\u0131 sorunlar\u0131 hakk\u0131nda bilgi verebilir.
\n    *   sudo csf -f<\/code> komutuyla kurallar\u0131 s\u0131f\u0131rlay\u0131p tekrar sudo csf -r<\/code> ile ba\u015flatarak ge\u00e7ici bir \u00e7\u00f6z\u00fcm deneyebilirsiniz.<\/p>\n
Performans Sorunlar\u0131<\/h4>\n
A\u015f\u0131r\u0131 kural say\u0131s\u0131 veya \u00e7ok s\u0131k\u0131 LFD ayarlar\u0131, sunucunuzun performans\u0131n\u0131 etkileyebilir.<\/p>\n
*   \u00c7\u00f6z\u00fcm:<\/strong>
\n    *   csf.deny<\/code> dosyas\u0131ndaki IP say\u0131s\u0131n\u0131 d\u00fczenli olarak kontrol edin. \u00c7ok fazla engellenen IP, IPtables \u00fczerinde y\u00fck olu\u015fturabilir. Gereksiz veya eski engellemeleri kald\u0131r\u0131n.
\n    *   PS_LIMIT<\/code> gibi s\u00fcre\u00e7 izleme ayarlar\u0131n\u0131 dikkatli yap\u0131n. \u00c7ok d\u00fc\u015f\u00fck limitler, me\u015fru s\u00fcre\u00e7lerin sonland\u0131r\u0131lmas\u0131na yol a\u00e7abilir.
\n    *   PORTFLOOD<\/code> ve SYNFLOOD<\/code> ayarlar\u0131n\u0131 sunucunuzun trafi\u011fine g\u00f6re optimize edin. Agresif ayarlar, me\u015fru trafi\u011fi de engelleyebilir.<\/p>\n
En \u0130yi Uygulamalar<\/h4>\n
1.  Yaln\u0131zca Gerekli Portlar\u0131 A\u00e7\u0131n:<\/strong> “Minimum ayr\u0131cal\u0131k” ilkesini uygulay\u0131n. Sunucunuzda \u00e7al\u0131\u015fmayan servislerin portlar\u0131n\u0131 a\u00e7may\u0131n.
\n2.  SSH Portunu De\u011fi\u015ftirin:<\/strong> Varsay\u0131lan SSH portu olan 22’yi bilinen bir ba\u015fka porta (\u00f6rne\u011fin 2222) de\u011fi\u015ftirmek, otomatik brute-force sald\u0131r\u0131lar\u0131n\u0131 azalt\u0131r. Bu de\u011fi\u015fikli\u011fi hem SSH yap\u0131land\u0131rma dosyas\u0131nda (\/etc\/ssh\/sshd_config<\/code>) hem de csf.conf<\/code> dosyas\u0131ndaki TCP_IN<\/code> listesinde yapmay\u0131 unutmay\u0131n.
\n3.  G\u00fc\u00e7l\u00fc Parolalar Kullan\u0131n:<\/strong> CSF sizi brute-force sald\u0131r\u0131lar\u0131ndan korur, ancak g\u00fc\u00e7l\u00fc ve benzersiz parolalar kullanmak her zaman ilk savunma hatt\u0131n\u0131z olmal\u0131d\u0131r.
\n4.  D\u00fczenli G\u00fcncellemeler:<\/strong> CSF’yi ve Ubuntu sisteminizi d\u00fczenli olarak g\u00fcncelleyin.<\/p>\n
sudo csf -u\n    sudo apt update && sudo apt upgrade -y<\/code><\/pre>\n
5.  Loglar\u0131 \u0130zleyin:<\/strong> \/var\/log\/lfd.log<\/code> ve \/var\/log\/csf.log<\/code> dosyalar\u0131n\u0131 d\u00fczenli olarak kontrol ederek \u015f\u00fcpheli etkinlikleri veya engellemeleri takip edin.
\n6.  Yedekleme:<\/strong> \/etc\/csf<\/code> dizinindeki yap\u0131land\u0131rma dosyalar\u0131n\u0131z\u0131 d\u00fczenli olarak yedekleyin. Bir sorun durumunda kolayca geri d\u00f6nebilirsiniz.<\/p>\n
sudo cp -r \/etc\/csf \/root\/csf_backup_$(date +%Y%m%d)<\/code><\/pre>\n
7.  Beyaz Liste (Whitelist) Kullan\u0131m\u0131:<\/strong> G\u00fcvenilir IP adreslerini (\u00f6rne\u011fin kendi ofis IP’niz) beyaz listeye ekleyerek, LFD’nin sizi yanl\u0131\u015fl\u0131kla engellemesini \u00f6nleyebilirsiniz. Ancak, yaln\u0131zca kesinlikle g\u00fcvendi\u011finiz IP’leri ekleyin.
\n8.  E-posta Uyar\u0131lar\u0131n\u0131 Yap\u0131land\u0131r\u0131n:<\/strong> LF_ALERT_TO<\/code> ayar\u0131n\u0131 do\u011fru bir e-posta adresiyle yap\u0131land\u0131rarak g\u00fcvenlik olaylar\u0131ndan an\u0131nda haberdar olun.<\/p>\n
CSF’yi Kald\u0131rma<\/h3>\n
E\u011fer CSF’yi sunucunuzdan kald\u0131rmak isterseniz, a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 izleyebilirsiniz.<\/p>\n
1.  CSF Dizinine Gitme:<\/strong><\/p>\n
cd \/etc\/csf<\/code><\/pre>\n
2.  Kald\u0131rma Beti\u011fini \u00c7al\u0131\u015ft\u0131rma:<\/strong><\/p>\n
sudo sh uninstall.sh<\/code><\/pre>\n
    Bu betik, CSF ve LFD servislerini durduracak, t\u00fcm dosyalar\u0131n\u0131 kald\u0131racak ve IPtables kurallar\u0131n\u0131 temizleyecektir.<\/p>\n
3.  Kalan Ba\u011f\u0131ml\u0131l\u0131klar\u0131 Kald\u0131rma (\u0130ste\u011fe Ba\u011fl\u0131):<\/strong>
\n    CSF ile birlikte kurdu\u011funuz sendmail<\/code>, perl<\/code> mod\u00fclleri gibi ba\u011f\u0131ml\u0131l\u0131klar\u0131 kald\u0131rmak isteyebilirsiniz.<\/p>\n
sudo apt purge sendmail libwww-perl liblwp-protocol-https-perl -y\n    sudo apt autoremove -y<\/code><\/pre>\n
4.  UFW’yi Yeniden Etkinle\u015ftirme (\u0130ste\u011fe Ba\u011fl\u0131):<\/strong>
\n    E\u011fer CSF’yi kald\u0131rd\u0131ktan sonra ba\u015fka bir g\u00fcvenlik duvar\u0131 kullanmak isterseniz (\u00f6rne\u011fin UFW), onu yeniden etkinle\u015ftirebilirsiniz.<\/p>\n
sudo ufw enable<\/code><\/pre>\n
    UFW’yi etkinle\u015ftirmeden \u00f6nce kurallar\u0131n\u0131 yap\u0131land\u0131rmay\u0131 unutmay\u0131n.<\/p>\n
Sonu\u00e7<\/h3>\n
Config Server Firewall (CSF), Ubuntu sunucular\u0131n\u0131z i\u00e7in kapsaml\u0131 ve g\u00fc\u00e7l\u00fc bir g\u00fcvenlik duvar\u0131 \u00e7\u00f6z\u00fcm\u00fcd\u00fcr. Bu makalede, CSF’nin kurulumundan ba\u015flayarak, temel ve geli\u015fmi\u015f yap\u0131land\u0131rma se\u00e7eneklerine, IP y\u00f6netimi, i\u015flem takibi, dizin izleme gibi \u00f6zelliklerine ve son olarak sorun giderme ipu\u00e7lar\u0131 ile en iyi uygulamalara kadar geni\u015f bir yelpazeyi ele ald\u0131k.<\/p>\n
CSF’nin sundu\u011fu LFD (Login Failure Daemon) gibi \u00f6zellikler, sunucunuzu brute-force sald\u0131r\u0131lar\u0131ndan ve di\u011fer yayg\u0131n tehditlerden korumak i\u00e7in hayati \u00f6neme sahiptir. Do\u011fru yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131nda, CSF sunucunuzun g\u00fcvenli\u011fini \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131rabilir. Ancak, unutulmamal\u0131d\u0131r ki hi\u00e7bir g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fc tek ba\u015f\u0131na yeterli de\u011fildir. CSF’yi g\u00fc\u00e7l\u00fc parolalar, d\u00fczenli sistem g\u00fcncellemeleri, g\u00fcvenli uygulama yap\u0131land\u0131rmalar\u0131 ve s\u00fcrekli izleme gibi di\u011fer g\u00fcvenlik \u00f6nlemleriyle birle\u015ftirmek, sunucunuz i\u00e7in en sa\u011flam savunmay\u0131 olu\u015fturacakt\u0131r.<\/p>\n
G\u00fcvenlik duvar\u0131 yap\u0131land\u0131rmas\u0131 hassas bir konudur ve yanl\u0131\u015f ayarlar sunucuya eri\u015fimi tamamen engelleyebilir. Bu nedenle, her zaman dikkatli olun, de\u011fi\u015fiklikleri test edin ve kendinizi kilitlemeye kar\u015f\u0131 \u00f6nlemlerinizi (\u00f6rne\u011fin konsol eri\u015fimi) al\u0131n. Bu rehberin, Ubuntu sunucular\u0131n\u0131zda CSF’yi etkin bir \u015fekilde kurman\u0131za ve yap\u0131land\u0131rman\u0131za yard\u0131mc\u0131 olaca\u011f\u0131n\u0131 umuyoruz. G\u00fcvenli sunucular dileriz!<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Ubuntu \u00dczerinde Config Server Firewall (CSF) Kurulumu ve Yap\u0131land\u0131rmas\u0131\nGiri\u015f: Sunucu G\u00fcvenli\u011finde CSF’nin \u00d6nemi\nG\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnya","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-36993","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nUbuntu \u00dczerinde Config Server Firewall (CSF) Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ubuntu \u00dczerinde Config Server Firewall (CSF) Kurulumu ve Yap\u0131land\u0131rmas\u0131\" \/>\n<meta property=\"og:description\" content=\"Ubuntu \u00dczerinde Config Server Firewall (CSF) Kurulumu ve Yap\u0131land\u0131rmas\u0131 Giri\u015f: Sunucu G\u00fcvenli\u011finde CSF'nin \u00d6nemi G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnya\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-25T19:40:59+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"22 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Ubuntu \u00dczerinde Config Server Firewall (CSF) Kurulumu ve Yap\u0131land\u0131rmas\u0131\",\"datePublished\":\"2025-12-25T19:40:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/\"},\"wordCount\":3932,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/\",\"name\":\"Ubuntu \u00dczerinde Config Server Firewall (CSF) Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-12-25T19:40:59+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ubuntu \u00dczerinde Config Server Firewall (CSF) Kurulumu ve Yap\u0131land\u0131rmas\u0131\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Ubuntu \u00dczerinde Config Server Firewall (CSF) Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/","og_locale":"tr_TR","og_type":"article","og_title":"Ubuntu \u00dczerinde Config Server Firewall (CSF) Kurulumu ve Yap\u0131land\u0131rmas\u0131","og_description":"Ubuntu \u00dczerinde Config Server Firewall (CSF) Kurulumu ve Yap\u0131land\u0131rmas\u0131 Giri\u015f: Sunucu G\u00fcvenli\u011finde CSF'nin \u00d6nemi G\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnya","og_url":"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-12-25T19:40:59+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"22 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Ubuntu \u00dczerinde Config Server Firewall (CSF) Kurulumu ve Yap\u0131land\u0131rmas\u0131","datePublished":"2025-12-25T19:40:59+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/"},"wordCount":3932,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/","url":"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/","name":"Ubuntu \u00dczerinde Config Server Firewall (CSF) Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-12-25T19:40:59+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-uzerinde-config-server-firewall-csf-kurulumu-ve-yapilandirmasi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Ubuntu \u00dczerinde Config Server Firewall (CSF) Kurulumu ve Yap\u0131land\u0131rmas\u0131"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/36993","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=36993"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/36993\/revisions"}],"predecessor-version":[{"id":36994,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/36993\/revisions\/36994"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=36993"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=36993"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=36993"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}