{"id":39458,"date":"2026-02-21T19:40:58","date_gmt":"2026-02-21T16:40:58","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=39458"},"modified":"2026-02-21T19:40:58","modified_gmt":"2026-02-21T16:40:58","slug":"nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/","title":{"rendered":"Nmap ve Tcpdump ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rman\u0131z\u0131 Test Etme"},"content":{"rendered":"

<\/p>\n

Nmap ve Tcpdump ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rman\u0131z\u0131 Test Etme<\/h2>\n

Giri\u015f<\/h2>\n

G\u00fcn\u00fcm\u00fcz\u00fcn birbirine ba\u011fl\u0131 d\u00fcnyas\u0131nda, siber g\u00fcvenlik her zamankinden daha kritik bir \u00f6neme sahiptir. \u0130\u015fletmeler ve bireyler, s\u00fcrekli geli\u015fen siber tehdit ortam\u0131nda a\u011flar\u0131n\u0131 ve verilerini korumak i\u00e7in \u00e7e\u015fitli g\u00fcvenlik \u00f6nlemlerine ba\u015fvurmaktad\u0131r. Bu \u00f6nlemlerin ba\u015f\u0131nda, a\u011f trafi\u011fini izleyen ve kontrol eden, yetkisiz eri\u015fimi engelleyen ve k\u00f6t\u00fc niyetli sald\u0131r\u0131lar\u0131 \u00f6nleyen g\u00fcvenlik duvarlar\u0131 (firewall) gelir. Ancak bir g\u00fcvenlik duvar\u0131n\u0131n varl\u0131\u011f\u0131 tek ba\u015f\u0131na yeterli de\u011fildir; do\u011fru yap\u0131land\u0131r\u0131lm\u0131\u015f olmas\u0131 ve beklendi\u011fi gibi \u00e7al\u0131\u015fmas\u0131 esast\u0131r. Yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f bir g\u00fcvenlik duvar\u0131, a\u00e7\u0131lmas\u0131 ama\u00e7lanmayan portlar\u0131 a\u00e7\u0131k b\u0131rakabilir, hassas servislere eri\u015fime izin verebilir veya kritik trafi\u011fi engelleyerek i\u015f s\u00fcreklili\u011fini bozabilir.<\/p>\n

Bu teknik makalede, g\u00fcvenlik duvar\u0131 yap\u0131land\u0131rman\u0131z\u0131n etkinli\u011fini test etmek i\u00e7in iki g\u00fc\u00e7l\u00fc ve yayg\u0131n olarak kullan\u0131lan a\u00e7\u0131k kaynak arac\u0131 olan Nmap ve Tcpdump’\u0131 nas\u0131l kullanaca\u011f\u0131n\u0131z\u0131 ayr\u0131nt\u0131l\u0131 olarak inceleyece\u011fiz. Nmap (Network Mapper), bir a\u011f ke\u015fif ve g\u00fcvenlik denetim arac\u0131 olarak bilinirken, Tcpdump ise a\u011f trafi\u011fini yakalay\u0131p analiz etmeye yarayan bir paket analizcisidir. Bu iki arac\u0131 bir arada kullanarak, g\u00fcvenlik duvar\u0131n\u0131z\u0131n d\u0131\u015far\u0131dan ve i\u00e7eriden gelen trafi\u011fe nas\u0131l tepki verdi\u011fini g\u00f6zlemleyebilir, tan\u0131mlad\u0131\u011f\u0131n\u0131z kurallar\u0131n do\u011fru \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 do\u011frulayabilir ve olas\u0131 g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 tespit edebilirsiniz. Makalemiz, temel g\u00fcvenlik duvar\u0131 kavramlar\u0131ndan ba\u015flayarak, Nmap ve Tcpdump’\u0131n \u00f6zelliklerini, komutlar\u0131n\u0131 ve en \u00f6nemlisi, ger\u00e7ek d\u00fcnya senaryolar\u0131nda g\u00fcvenlik duvar\u0131 testlerinde nas\u0131l entegre edilece\u011fini ad\u0131m ad\u0131m a\u00e7\u0131klayacakt\u0131r. Amac\u0131m\u0131z, a\u011f y\u00f6neticilerine ve g\u00fcvenlik uzmanlar\u0131na, a\u011f savunmalar\u0131n\u0131 g\u00fc\u00e7lendirmek i\u00e7in pratik ve uygulanabilir bir rehber sunmakt\u0131r.<\/p>\n

G\u00fcvenlik Duvarlar\u0131: Temeller ve \u00d6nemi<\/h2>\n

G\u00fcvenlik duvar\u0131 (firewall), bir a\u011f\u0131n veya ana bilgisayar\u0131n g\u00fcvenli\u011fini sa\u011flamak amac\u0131yla, \u00f6nceden belirlenmi\u015f kurallara g\u00f6re gelen ve giden a\u011f trafi\u011fini izleyen ve kontrol eden bir a\u011f g\u00fcvenlik sistemidir. Temel olarak, g\u00fcvenilmeyen bir a\u011fdan (\u00f6rne\u011fin internet) gelen yetkisiz eri\u015fimi engelleyerek, g\u00fcvenilen bir a\u011fdaki (\u00f6rne\u011fin yerel a\u011f\u0131n\u0131z) kaynaklar\u0131 korur.<\/p>\n

G\u00fcvenlik Duvar\u0131 Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/h3>\n

G\u00fcvenlik duvarlar\u0131, farkl\u0131 seviyelerde \u00e7al\u0131\u015fabilir ve \u00e7e\u015fitli mekanizmalar kullanabilir:<\/p>\n

* Paket Filtreleme:<\/strong> En temel g\u00fcvenlik duvar\u0131 t\u00fcr\u00fc, her a\u011f paketini tek tek inceler ve kaynak\/hedef IP adresleri, port numaralar\u0131 ve protokoller gibi bilgilere dayanarak paketin ge\u00e7ip ge\u00e7meyece\u011fine karar verir. Bu, bir paketin i\u00e7eri\u011fini incelemez, sadece ba\u015fl\u0131k bilgilerini kontrol eder.
\n* Durum Bilgisi Olan (Stateful) Denetim:<\/strong> Daha geli\u015fmi\u015f g\u00fcvenlik duvarlar\u0131, a\u011f ba\u011flant\u0131lar\u0131n\u0131n durumunu takip eder. Bu, bir ba\u011flant\u0131n\u0131n (\u00f6rne\u011fin, bir TCP oturumu) ba\u015flat\u0131ld\u0131\u011f\u0131n\u0131, s\u00fcrd\u00fcr\u00fcld\u00fc\u011f\u00fcn\u00fc ve sonland\u0131r\u0131ld\u0131\u011f\u0131n\u0131 izledikleri anlam\u0131na gelir. D\u0131\u015far\u0131dan gelen bir paket, mevcut bir ba\u011flant\u0131n\u0131n par\u00e7as\u0131 de\u011filse reddedilir. Bu, d\u0131\u015far\u0131dan ba\u015flat\u0131lan yetkisiz ba\u011flant\u0131lar\u0131 engellemede \u00e7ok etkilidir.
\n* Uygulama Katman\u0131 A\u011f Ge\u00e7idi (Proxy Firewall):<\/strong> Bu t\u00fcr g\u00fcvenlik duvarlar\u0131, uygulama katman\u0131nda \u00e7al\u0131\u015f\u0131r ve belirli uygulama protokollerini (HTTP, FTP vb.) anlar. Trafi\u011fi proxy sunucu \u00fczerinden ge\u00e7irerek, paket i\u00e7eri\u011fini daha derinlemesine inceleyebilir ve daha karma\u015f\u0131k kurallar uygulayabilir.
\n* Yeni Nesil G\u00fcvenlik Duvarlar\u0131 (Next-Generation Firewalls – NGFW):<\/strong> NGFW’ler, geleneksel g\u00fcvenlik duvar\u0131 \u00f6zelliklerini, derin paket incelemesi (Deep Packet Inspection – DPI), uygulama fark\u0131ndal\u0131\u011f\u0131, sald\u0131r\u0131 tespit ve \u00f6nleme sistemleri (IDS\/IPS) ve tehdit istihbarat\u0131 gibi geli\u015fmi\u015f \u00f6zelliklerle birle\u015ftirir.<\/p>\n

G\u00fcvenlik Duvarlar\u0131n\u0131n \u00d6nemi<\/h3>\n

Bir g\u00fcvenlik duvar\u0131n\u0131n varl\u0131\u011f\u0131, modern a\u011f g\u00fcvenli\u011finin temel direklerinden biridir:<\/p>\n

* Yetkisiz Eri\u015fimi Engelleme:<\/strong> En temel i\u015flevi, a\u011f kaynaklar\u0131n\u0131 d\u0131\u015far\u0131dan gelen yetkisiz eri\u015fim giri\u015fimlerine kar\u015f\u0131 korumakt\u0131r.
\n* K\u00f6t\u00fc Ama\u00e7l\u0131 Yaz\u0131l\u0131mlar\u0131 ve Sald\u0131r\u0131lar\u0131 \u00d6nleme:<\/strong> Baz\u0131 g\u00fcvenlik duvarlar\u0131, bilinen k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131 veya sald\u0131r\u0131 modellerini alg\u0131layarak a\u011fa giri\u015flerini engelleyebilir.
\n* Veri H\u0131rs\u0131zl\u0131\u011f\u0131n\u0131 ve Kayb\u0131n\u0131 \u00d6nleme:<\/strong> Hassas verilerin d\u0131\u015far\u0131ya s\u0131zmas\u0131n\u0131 engelleyerek veri b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc ve gizlili\u011fini korur.
\n* A\u011f Segmentasyonu:<\/strong> B\u00fcy\u00fck a\u011flar\u0131 daha k\u00fc\u00e7\u00fck, y\u00f6netilebilir ve g\u00fcvenli segmentlere ay\u0131rarak sald\u0131r\u0131 y\u00fczeyini k\u00fc\u00e7\u00fclt\u00fcr.
\n* Politika Uygulama:<\/strong> \u015eirket politikalar\u0131n\u0131n (\u00f6rne\u011fin, belirli web sitelerine eri\u015fimi k\u0131s\u0131tlama) a\u011f d\u00fczeyinde uygulanmas\u0131n\u0131 sa\u011flar.<\/p>\n

G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rma Zorluklar\u0131<\/h3>\n

G\u00fcvenlik duvarlar\u0131 g\u00fc\u00e7l\u00fc ara\u00e7lar olsa da, yanl\u0131\u015f yap\u0131land\u0131rma ciddi g\u00fcvenlik zafiyetlerine yol a\u00e7abilir:<\/p>\n

* Karma\u015f\u0131kl\u0131k:<\/strong> \u00d6zellikle b\u00fcy\u00fck a\u011flarda, \u00e7ok say\u0131da kural seti ve politika y\u00f6netimi karma\u015f\u0131k olabilir.
\n* \u0130nsan Hatas\u0131:<\/strong> Kural tan\u0131mlamalar\u0131ndaki basit bir hata, istenmeyen bir portun a\u00e7\u0131k kalmas\u0131na veya kritik bir servisin eri\u015filemez olmas\u0131na neden olabilir.
\n* G\u00fcncel Kalmama:<\/strong> A\u011fdaki de\u011fi\u015fiklikler, yeni uygulamalar veya tehditler kar\u015f\u0131s\u0131nda g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131n g\u00fcncellenmemesi, korumas\u0131z alanlar yaratabilir.
\n* G\u00f6r\u00fcn\u00fcrl\u00fck Eksikli\u011fi:<\/strong> G\u00fcvenlik duvar\u0131n\u0131n neyi engelledi\u011fini veya neye izin verdi\u011fini tam olarak anlamamak, sorun gidermeyi ve g\u00fcvenlik denetimini zorla\u015ft\u0131r\u0131r.<\/p>\n

Bu zorluklar g\u00f6z \u00f6n\u00fcne al\u0131nd\u0131\u011f\u0131nda, g\u00fcvenlik duvar\u0131 yap\u0131land\u0131rmas\u0131n\u0131n d\u00fczenli olarak test edilmesi ve do\u011frulanmas\u0131 hayati \u00f6neme sahiptir. \u0130\u015fte bu noktada Nmap ve Tcpdump devreye girer.<\/p>\n

Nmap: A\u011f Ke\u015ffi ve G\u00fcvenlik Tarama Arac\u0131<\/h2>\n

Nmap (Network Mapper), Fyodor taraf\u0131ndan geli\u015ftirilen, a\u00e7\u0131k kaynakl\u0131, \u00e7ok y\u00f6nl\u00fc bir a\u011f ke\u015fif ve g\u00fcvenlik denetim arac\u0131d\u0131r. Sistem y\u00f6neticileri, a\u011f g\u00fcvenlik uzmanlar\u0131 ve s\u0131zma testi uzmanlar\u0131 taraf\u0131ndan yayg\u0131n olarak kullan\u0131l\u0131r. Nmap’in temel amac\u0131, bir a\u011fdaki ana bilgisayarlar\u0131, a\u00e7\u0131k portlar\u0131, \u00e7al\u0131\u015fan servisleri, i\u015fletim sistemlerini ve hatta belirli g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 tespit etmektir.<\/p>\n

Nmap Neden G\u00fcvenlik Duvar\u0131 Testleri \u0130\u00e7in \u00d6nemlidir?<\/h3>\n

Nmap, g\u00fcvenlik duvar\u0131 testleri i\u00e7in vazge\u00e7ilmez bir ara\u00e7t\u0131r \u00e7\u00fcnk\u00fc:
\n* Farkl\u0131 Tarama Tipleri:<\/strong> \u00c7e\u015fitli tarama teknikleri sunarak, g\u00fcvenlik duvar\u0131n\u0131n farkl\u0131 protokol ve paket t\u00fcrlerine nas\u0131l tepki verdi\u011fini g\u00f6rmemizi sa\u011flar.
\n* Port Durumu Tespiti:<\/strong> Bir portun a\u00e7\u0131k (open), kapal\u0131 (closed) veya filtreli (filtered) olup olmad\u0131\u011f\u0131n\u0131 belirleyerek, g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131n beklenen sonucu verip vermedi\u011fini g\u00f6sterir.
\n* Servis ve \u0130\u015fletim Sistemi Tespiti:<\/strong> A\u00e7\u0131k portlarda hangi servislerin \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 ve hangi i\u015fletim sisteminin kullan\u0131ld\u0131\u011f\u0131n\u0131 belirleyerek, olas\u0131 zafiyetleri ortaya \u00e7\u0131kar\u0131r.
\n* Betik Motoru (NSE):<\/strong> Nmap Scripting Engine (NSE) sayesinde, g\u00fcvenlik duvar\u0131 bypass teknikleri, zay\u0131f konfig\u00fcrasyonlar veya belirli g\u00fcvenlik a\u00e7\u0131klar\u0131 gibi daha geli\u015fmi\u015f testler yap\u0131labilir.<\/p>\n

Temel Nmap Komutlar\u0131 ve Kavramlar\u0131<\/h3>\n

Nmap, bir\u00e7ok farkl\u0131 tarama t\u00fcr\u00fc ve se\u00e7ene\u011fi sunar. \u0130\u015fte g\u00fcvenlik duvar\u0131 testleri i\u00e7in en yayg\u0131n kullan\u0131lanlar:<\/p>\n

* Temel Tarama:<\/strong>
\n nmap <\/code>
\n Bu komut, hedef ana bilgisayarda en yayg\u0131n 1000 TCP portunu tarar. Varsay\u0131lan olarak, SYN taramas\u0131 (-sS<\/code>) kullan\u0131l\u0131r.<\/p>\n

* SYN Tarama (-sS<\/code>):<\/strong>
\n nmap -sS <\/code>
\n SYN taramas\u0131 (“Stealth Scan” olarak da bilinir), TCP \u00fc\u00e7l\u00fc el s\u0131k\u0131\u015fmas\u0131n\u0131 tamamlamadan \u00f6nce ba\u011flant\u0131y\u0131 keser. Bu, genellikle g\u00fcvenlik duvarlar\u0131 ve IDS\/IPS sistemleri taraf\u0131ndan daha az fark edilir olabilir.
\n * open:<\/strong> SYN\/ACK yan\u0131t\u0131 al\u0131n\u0131r, RST g\u00f6nderilir.
\n * closed:<\/strong> RST\/ACK yan\u0131t\u0131 al\u0131n\u0131r.
\n * filtered:<\/strong> Yan\u0131t al\u0131nmaz veya ICMP “Destination Unreachable” hatas\u0131 al\u0131n\u0131r.<\/p>\n

* TCP Connect Tarama (-sT<\/code>):<\/strong>
\n nmap -sT <\/code>
\n Bu tarama, hedef portla tam bir TCP \u00fc\u00e7l\u00fc el s\u0131k\u0131\u015fmas\u0131 ger\u00e7ekle\u015ftirir. Daha g\u00fcr\u00fclt\u00fcl\u00fc (noisy) bir taramad\u0131r ve g\u00fcvenlik duvarlar\u0131 taraf\u0131ndan kolayca tespit edilir, ancak baz\u0131 durumlarda SYN taramas\u0131n\u0131n \u00e7al\u0131\u015fmad\u0131\u011f\u0131 yerlerde kullan\u0131labilir.<\/p>\n

* UDP Tarama (-sU<\/code>):<\/strong>
\n nmap -sU <\/code>
\n UDP portlar\u0131n\u0131 tarar. UDP durum bilgisi olmayan bir protokol oldu\u011fu i\u00e7in, bu tarama daha yava\u015f ve daha az g\u00fcvenilirdir.
\n * open:<\/strong> UDP yan\u0131t\u0131 al\u0131n\u0131r.
\n * closed:<\/strong> ICMP “Port Unreachable” hatas\u0131 al\u0131n\u0131r.
\n * filtered:<\/strong> Yan\u0131t al\u0131nmaz veya ba\u015fka bir ICMP hatas\u0131 al\u0131n\u0131r.<\/p>\n

* ACK Tarama (-sA<\/code>):<\/strong>
\n nmap -sA <\/code>
\n Bu tarama, sadece ACK bayra\u011f\u0131 ayarlanm\u0131\u015f paketler g\u00f6nderir. Durum bilgisi olan (stateful) g\u00fcvenlik duvarlar\u0131n\u0131 test etmek i\u00e7in kullan\u0131l\u0131r.
\n * unfiltered:<\/strong> RST yan\u0131t\u0131 al\u0131n\u0131r (firewall paketi ge\u00e7irdi, hedef kapal\u0131).
\n * filtered:<\/strong> Yan\u0131t al\u0131nmaz veya ICMP “Destination Unreachable” hatas\u0131 al\u0131n\u0131r (firewall paketi engelledi).<\/p>\n

* FIN, Xmas, Null Taramalar\u0131 (-sF<\/code>, -sX<\/code>, -sN<\/code>):<\/strong>
\n Bu taramalar, TCP bayraklar\u0131n\u0131 manip\u00fcle ederek g\u00fcvenlik duvarlar\u0131n\u0131 atlatmaya \u00e7al\u0131\u015f\u0131r. RFC 793’e g\u00f6re, kapal\u0131 bir port, bu bayraklarla gelen bir pakete RST ile yan\u0131t vermelidir. A\u00e7\u0131k portlar ise yan\u0131t vermez.
\n * open|filtered:<\/strong> Yan\u0131t yok.
\n * closed:<\/strong> RST yan\u0131t\u0131.<\/p>\n

* Belirli Portlar\u0131 Tarama (-p<\/code>):<\/strong>
\n nmap -p 22,80,443 <\/code> (Belirli portlar)
\n nmap -p 1-1024 <\/code> (Port aral\u0131\u011f\u0131)
\n nmap -p- <\/code> (T\u00fcm portlar)<\/p>\n

* Host Ke\u015ffini Atla (-Pn<\/code>):<\/strong>
\n nmap -Pn <\/code>
\n Nmap, taramaya ba\u015flamadan \u00f6nce hedefin aktif olup olmad\u0131\u011f\u0131n\u0131 kontrol eder. G\u00fcvenlik duvar\u0131 ICMP (ping) isteklerini engelliyorsa, -Pn<\/code> se\u00e7ene\u011fi ile bu kontrol atlanabilir.<\/p>\n

* Ayr\u0131nt\u0131l\u0131 \u00c7\u0131kt\u0131 (-v<\/code>):<\/strong>
\n nmap -v <\/code>
\n Tarama s\u00fcreci hakk\u0131nda daha fazla bilgi g\u00f6sterir.<\/p>\n

* \u0130\u015fletim Sistemi Tespiti (-O<\/code>):<\/strong>
\n nmap -O <\/code>
\n Hedefin i\u015fletim sistemini tahmin etmeye \u00e7al\u0131\u015f\u0131r.<\/p>\n

* Servis Versiyon Tespiti (-sV<\/code>):<\/strong>
\n nmap -sV <\/code>
\n A\u00e7\u0131k portlarda \u00e7al\u0131\u015fan servislerin versiyonlar\u0131n\u0131 tespit eder.<\/p>\n

* Agresif Tarama (-A<\/code>):<\/strong>
\n nmap -A <\/code>
\n -O<\/code>, -sV<\/code>, -sC<\/code> (varsay\u0131lan betikler) ve traceroute gibi se\u00e7enekleri birle\u015ftirir. Kapsaml\u0131 bir tarama i\u00e7in iyidir.<\/p>\n

* Nmap Betikleri (--script<\/code>):<\/strong>
\n nmap --script http-enum <\/code>
\n Nmap Scripting Engine (NSE), \u00e7e\u015fitli g\u00f6revler i\u00e7in betikler \u00e7al\u0131\u015ft\u0131r\u0131r (\u00f6rne\u011fin, zafiyet tespiti, ke\u015fif, brute-force). G\u00fcvenlik duvar\u0131 testleri i\u00e7in \u00f6zel betikler de mevcuttur (\u00f6rne\u011fin, firewall-bypass<\/code>).<\/p>\n

Nmap Sonu\u00e7lar\u0131n\u0131 Yorumlama<\/h3>\n

Nmap, tarad\u0131\u011f\u0131 portlar i\u00e7in \u00fc\u00e7 ana durum d\u00f6nd\u00fcr\u00fcr:
\n* open:<\/strong> Port, ba\u011flant\u0131lara aktif olarak yan\u0131t veriyor. Bu, bir uygulaman\u0131n veya servisin o portu dinledi\u011fi anlam\u0131na gelir. G\u00fcvenlik duvar\u0131 bu trafi\u011fe izin veriyor.
\n* closed:<\/strong> Port, ba\u011flant\u0131 giri\u015fimlerine yan\u0131t veriyor ancak \u00fczerinde hi\u00e7bir uygulama dinlemiyor. G\u00fcvenlik duvar\u0131 trafi\u011fe izin veriyor ancak hedefte dinleyen bir servis yok.
\n* filtered:<\/strong> Port, Nmap’in paketlerine yan\u0131t vermiyor. Bu, bir g\u00fcvenlik duvar\u0131n\u0131n, y\u00f6nlendiricinin veya ba\u015fka bir filtreleme cihaz\u0131n\u0131n trafi\u011fi engelledi\u011fi anlam\u0131na gelir. Nmap, portun a\u00e7\u0131k m\u0131 kapal\u0131 m\u0131 oldu\u011funu belirleyemez.
\n* unfiltered:<\/strong> ACK taramas\u0131 gibi belirli tarama t\u00fcrlerinde g\u00f6r\u00fcn\u00fcr. Bu, firewall’\u0131n paketi ge\u00e7irdi\u011fini ancak portun a\u00e7\u0131k m\u0131 kapal\u0131 m\u0131 oldu\u011funu Nmap’in belirleyemedi\u011fini g\u00f6sterir.<\/p>\n

G\u00fcvenlik duvar\u0131 testinde, “filtered” durumu genellikle istenen bir sonu\u00e7tur, \u00e7\u00fcnk\u00fc bu, g\u00fcvenlik duvar\u0131n\u0131n trafi\u011fi ba\u015far\u0131yla engelledi\u011fini g\u00f6sterir. Ancak, “open” veya “closed” durumlar\u0131, g\u00fcvenlik duvar\u0131n\u0131n istenmeyen trafi\u011fe izin verdi\u011fini veya bir g\u00fcvenlik bo\u015flu\u011fu oldu\u011funu i\u015faret edebilir.<\/p>\n

Tcpdump: A\u011f Trafi\u011fi Analiz Arac\u0131<\/h2>\n

Tcpdump, komut sat\u0131r\u0131 tabanl\u0131, g\u00fc\u00e7l\u00fc bir a\u011f paketi analizcisidir. A\u011f aray\u00fczlerinden ge\u00e7en paketleri yakalar, g\u00f6r\u00fcnt\u00fcler ve analiz eder. Ger\u00e7ek zamanl\u0131 olarak a\u011f trafi\u011fini izlemek, sorun gidermek, g\u00fcvenlik olaylar\u0131n\u0131 incelemek ve tabii ki g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131n nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frulamak i\u00e7in vazge\u00e7ilmez bir ara\u00e7t\u0131r.<\/p>\n

Tcpdump Neden G\u00fcvenlik Duvar\u0131 Testleri \u0130\u00e7in \u00d6nemlidir?<\/h3>\n

Nmap, bir portun “open”, “closed” veya “filtered” oldu\u011funu s\u00f6yler, ancak bu sonu\u00e7lara nas\u0131l ula\u015ft\u0131\u011f\u0131n\u0131 veya g\u00fcvenlik duvar\u0131n\u0131n paketi tam olarak nas\u0131l i\u015fledi\u011fini g\u00f6stermez. \u0130\u015fte burada Tcpdump devreye girer:
\n* Paket Ak\u0131\u015f\u0131n\u0131 G\u00f6zlemleme:<\/strong> Nmap taramalar\u0131n\u0131n olu\u015fturdu\u011fu paketlerin a\u011fda nas\u0131l hareket etti\u011fini (firewall’a ula\u015f\u0131p ula\u015fmad\u0131\u011f\u0131n\u0131, firewall taraf\u0131ndan d\u00fc\u015f\u00fcr\u00fcl\u00fcp d\u00fc\u015f\u00fcr\u00fclmedi\u011fini, hedefe ula\u015f\u0131p ula\u015fmad\u0131\u011f\u0131n\u0131) ger\u00e7ek zamanl\u0131 olarak g\u00f6rmemizi sa\u011flar.
\n* Firewall Kural Do\u011frulamas\u0131:<\/strong> G\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131n beklenen \u015fekilde \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 (\u00f6rne\u011fin, belirli bir porttan gelen trafi\u011fi ger\u00e7ekten engelledi\u011fini) paket d\u00fczeyinde do\u011frulaman\u0131za yard\u0131mc\u0131 olur.
\n* Yanl\u0131\u015f Pozitif\/Negatif Tespiti:<\/strong> Nmap’in “filtered” olarak g\u00f6sterdi\u011fi bir portun asl\u0131nda hedefe ula\u015ft\u0131\u011f\u0131n\u0131 veya tam tersini tespit edebilirsiniz.
\n* Ba\u011flant\u0131 Durumunu Anlama:<\/strong> TCP \u00fc\u00e7l\u00fc el s\u0131k\u0131\u015fmas\u0131 veya UDP ileti\u015fimi gibi ba\u011flant\u0131 s\u00fcre\u00e7lerinin detaylar\u0131n\u0131 inceleyebilirsiniz.<\/p>\n

Temel Tcpdump Komutlar\u0131 ve Kavramlar\u0131<\/h3>\n

Tcpdump’\u0131 kullanmak i\u00e7in, yakalama yapaca\u011f\u0131n\u0131z a\u011f aray\u00fcz\u00fcn\u00fc belirtmeniz ve iste\u011fe ba\u011fl\u0131 olarak filtreler uygulaman\u0131z gerekir.<\/p>\n

* Belirli Bir Aray\u00fcz\u00fc Dinleme:<\/strong>
\n sudo tcpdump -i eth0<\/code>
\n eth0<\/code> yerine kendi a\u011f aray\u00fcz\u00fcn\u00fcz\u00fc (\u00f6rne\u011fin, enp0s3<\/code>, wlan0<\/code>) yaz\u0131n. sudo tcpdump -D<\/code> komutu ile mevcut aray\u00fczleri listeleyebilirsiniz.<\/p>\n

* IP Adreslerini ve Portlar\u0131 \u00c7\u00f6zmeme (-n<\/code>, -nn<\/code>):<\/strong>
\n sudo tcpdump -n -i eth0<\/code> (IP adreslerini \u00e7\u00f6zmez, alan adlar\u0131n\u0131 g\u00f6stermez)
\n sudo tcpdump -nn -i eth0<\/code> (IP adreslerini ve port numaralar\u0131n\u0131 \u00e7\u00f6zmez, daha h\u0131zl\u0131 ve net \u00e7\u0131kt\u0131)<\/p>\n

* Paket \u0130\u00e7eri\u011fini G\u00f6r\u00fcnt\u00fcleme (-X<\/code>, -XX<\/code>, -A<\/code>):<\/strong>
\n sudo tcpdump -X -i eth0<\/code> (Hex ve ASCII format\u0131nda paket i\u00e7eri\u011fini g\u00f6sterir)
\n sudo tcpdump -XX -i eth0<\/code> (Ethernet ba\u015fl\u0131\u011f\u0131 da dahil Hex ve ASCII format\u0131nda)
\n sudo tcpdump -A -i eth0<\/code> (Sadece ASCII format\u0131nda paket i\u00e7eri\u011fini g\u00f6sterir, HTTP trafi\u011fi i\u00e7in kullan\u0131\u015fl\u0131d\u0131r)<\/p>\n

* Tam Paketi Yakalama (-s 0<\/code>):<\/strong>
\n sudo tcpdump -s 0 -i eth0<\/code>
\n Varsay\u0131lan olarak Tcpdump, paketlerin sadece ilk birka\u00e7 bayt\u0131n\u0131 yakalar. -s 0<\/code> ile t\u00fcm paketi yakalar.<\/p>\n

* Belirli Say\u0131da Paket Yakalama (-c<\/code>):<\/strong>
\n sudo tcpdump -c 10 -i eth0<\/code>
\n 10 paket yakalad\u0131ktan sonra durur.<\/p>\n

* Filtreleme Se\u00e7enekleri:<\/strong> Tcpdump, yakalanan paketleri filtrelemek i\u00e7in g\u00fc\u00e7l\u00fc bir s\u00f6zdizimi sunar:
\n * Host Filtreleme:<\/strong>
\n sudo tcpdump host 192.168.1.100<\/code> (Kaynak veya hedef IP’si bu olan t\u00fcm paketler)
\n sudo tcpdump src host 192.168.1.100<\/code> (Kaynak IP’si bu olan paketler)
\n sudo tcpdump dst host 192.168.1.100<\/code> (Hedef IP’si bu olan paketler)
\n * Port Filtreleme:<\/strong>
\n sudo tcpdump port 80<\/code> (Kaynak veya hedef portu 80 olan t\u00fcm paketler)
\n sudo tcpdump src port 80<\/code> (Kaynak portu 80 olan paketler)
\n sudo tcpdump dst port 80<\/code> (Hedef portu 80 olan paketler)
\n * Protokol Filtreleme:<\/strong>
\n sudo tcpdump tcp<\/code> (Sadece TCP paketleri)
\n sudo tcpdump udp<\/code> (Sadece UDP paketleri)
\n sudo tcpdump icmp<\/code> (Sadece ICMP paketleri)
\n * Mant\u0131ksal Operat\u00f6rler:<\/strong> and<\/code>, or<\/code>, not<\/code> ile filtreleri birle\u015ftirebilirsiniz.
\n sudo tcpdump -nn host 192.168.1.100 and port 22<\/code> (Bu IP’den veya bu IP’ye giden 22 numaral\u0131 port trafi\u011fi)
\n sudo tcpdump -nn src host 192.168.1.100 and dst port 80<\/code> (Bu IP’den gelen ve hedef portu 80 olan paketler)
\n sudo tcpdump -nn tcp port 80 or port 443<\/code> (TCP 80 veya 443 port trafi\u011fi)
\n sudo tcpdump -nn not icmp and host 192.168.1.100<\/code> (Bu IP’den veya bu IP’ye giden ICMP d\u0131\u015f\u0131ndaki t\u00fcm trafik)<\/p>\n

Tcpdump \u00c7\u0131kt\u0131s\u0131n\u0131 Yorumlama<\/h3>\n

Tcpdump \u00e7\u0131kt\u0131s\u0131, a\u011fdaki paketlerin anl\u0131k bir g\u00f6r\u00fcn\u00fcm\u00fcn\u00fc sunar. \u00d6zellikle TCP paketleri i\u00e7in bayraklar (SYN, ACK, RST, FIN) \u00e7ok \u00f6nemlidir:
\n* SYN:<\/strong> Ba\u011flant\u0131 ba\u015flatma iste\u011fi (Senkronize).
\n* ACK:<\/strong> Onay (Acknowledgement).
\n* SYN\/ACK:<\/strong> Ba\u011flant\u0131 ba\u015flatma iste\u011fi onay\u0131.
\n* RST:<\/strong> Ba\u011flant\u0131 s\u0131f\u0131rlama (Reset).
\n* FIN:<\/strong> Ba\u011flant\u0131 sonland\u0131rma (Finish).<\/p>\n

\u00d6rne\u011fin, bir TCP ba\u011flant\u0131s\u0131n\u0131n ba\u015far\u0131yla kurulmas\u0131 \u015fu \u015fekilde g\u00f6r\u00fcn\u00fcr:
\n1. [Kaynak IP].[Kaynak Port] > [Hedef IP].[Hedef Port]: Flags [S], seq ...<\/code> (SYN paketi)
\n2. [Hedef IP].[Hedef Port] > [Kaynak IP].[Kaynak Port]: Flags [S.], seq ..., ack ...<\/code> (SYN\/ACK paketi)
\n3. [Kaynak IP].[Kaynak Port] > [Hedef IP].[Hedef Port]: Flags [.], ack ...<\/code> (ACK paketi)<\/p>\n

Bir g\u00fcvenlik duvar\u0131 bir paketi engelledi\u011finde, Tcpdump \u00e7\u0131kt\u0131s\u0131nda o paketin firewall’\u0131n d\u0131\u015f aray\u00fcz\u00fcne gelip hedefe ula\u015fmad\u0131\u011f\u0131n\u0131 veya firewall’dan bir ICMP “Destination Unreachable” mesaj\u0131 d\u00f6nd\u00fc\u011f\u00fcn\u00fc g\u00f6rebilirsiniz.<\/p>\n

G\u00fcvenlik Duvar\u0131 Test Senaryolar\u0131: Nmap ve Tcpdump Birle\u015fimi<\/h2>\n

Bu b\u00f6l\u00fcmde, Nmap ve Tcpdump’\u0131 kullanarak g\u00fcvenlik duvar\u0131 yap\u0131land\u0131rman\u0131z\u0131n etkinli\u011fini test etmek i\u00e7in pratik senaryolar sunaca\u011f\u0131z. Her senaryo, belirli bir g\u00fcvenlik duvar\u0131 kural\u0131n\u0131 do\u011frulamay\u0131 veya bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 ortaya \u00e7\u0131karmay\u0131 ama\u00e7lar.<\/p>\n

Haz\u0131rl\u0131k A\u015famas\u0131<\/h3>\n

Testlere ba\u015flamadan \u00f6nce, a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 tamamlamak \u00f6nemlidir:<\/p>\n

* Test Ortam\u0131 Olu\u015fturma:<\/strong> Ger\u00e7ek \u00fcretim ortam\u0131nda riskli testler yapmaktan ka\u00e7\u0131n\u0131n. Bir test laboratuvar\u0131 veya izole bir sanal ortam kurun. Bu ortamda en az bir sald\u0131rgan makine (Nmap’i \u00e7al\u0131\u015ft\u0131raca\u011f\u0131n\u0131z), bir g\u00fcvenlik duvar\u0131 ve bir hedef sunucu bulunmal\u0131d\u0131r.
\n* G\u00fcvenlik Duvar\u0131 Kurallar\u0131n\u0131 Tan\u0131mlama:<\/strong> Test etmek istedi\u011finiz g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 net bir \u015fekilde belirleyin. \u00d6rne\u011fin:
\n * D\u0131\u015far\u0131dan gelen SSH (22\/TCP) ve HTTP (80\/TCP) trafi\u011fine izin ver.
\n * D\u0131\u015far\u0131dan gelen t\u00fcm di\u011fer portlara eri\u015fimi engelle.
\n * Belirli bir IP adresinden gelen t\u00fcm trafi\u011fi engelle.
\n* \u0130zinleri Kontrol Etme:<\/strong> Nmap ve Tcpdump gibi ara\u00e7lar\u0131 \u00e7al\u0131\u015ft\u0131rmak i\u00e7in genellikle k\u00f6k (root) ayr\u0131cal\u0131klar\u0131 gereklidir (sudo<\/code>).
\n* A\u011f Topolojisini Anlama:<\/strong> G\u00fcvenlik duvar\u0131n\u0131n a\u011fdaki konumunu (\u00f6rne\u011fin, d\u0131\u015f aray\u00fcz\u00fc internete, i\u00e7 aray\u00fcz\u00fc yerel a\u011fa bak\u0131yor) ve IP adreslerini not al\u0131n.<\/p>\n

Senaryo 1: A\u00e7\u0131k Portlar\u0131 ve Servisleri Do\u011frulama<\/h3>\n

Hedef:<\/strong> G\u00fcvenlik duvar\u0131n\u0131n, izin vermesi gereken portlar\u0131 ger\u00e7ekten a\u00e7\u0131k b\u0131rakt\u0131\u011f\u0131n\u0131 ve bu portlarda beklenen servislerin \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frulamak.<\/p>\n

1. G\u00fcvenlik Duvar\u0131 Kural\u0131:<\/strong> D\u0131\u015far\u0131dan gelen 22 (SSH), 80 (HTTP) ve 443 (HTTPS) numaral\u0131 TCP portlar\u0131na hedef sunucuya eri\u015fime izin ver. Di\u011fer t\u00fcm portlar\u0131 engelle.
\n2. Tcpdump \u00c7al\u0131\u015ft\u0131rma (Firewall’\u0131n D\u0131\u015f Aray\u00fcz\u00fcnde):<\/strong>
\n sudo tcpdump -nn -i eth0 host and (port 22 or port 80 or port 443)<\/code>
\n Bu komut, hedef sunucuya giden veya gelen 22, 80 ve 443 numaral\u0131 portlardaki trafi\u011fi yakalayacakt\u0131r.
\n3. Nmap \u00c7al\u0131\u015ft\u0131rma (Sald\u0131rgan Makinesinden):<\/strong>
\n nmap -sS -p 22,80,443,8080 <\/code>
\n Burada 8080, engellenmesi gereken bir port olarak eklenmi\u015ftir.
\n4. Analiz:<\/strong>
\n * Nmap \u00c7\u0131kt\u0131s\u0131:<\/strong> 22, 80 ve 443 numaral\u0131 portlar “open” olarak g\u00f6r\u00fcnmelidir. 8080 numaral\u0131 port “filtered” olarak g\u00f6r\u00fcnmelidir.
\n * Tcpdump \u00c7\u0131kt\u0131s\u0131:<\/strong>
\n * “open” olarak g\u00f6r\u00fcnen portlar (22, 80, 443) i\u00e7in, sald\u0131rgan makineden gelen SYN paketlerini, hedef sunucudan gelen SYN\/ACK paketlerini ve sald\u0131rgan makineden gelen ACK paketlerini (\u00fc\u00e7l\u00fc el s\u0131k\u0131\u015fma) g\u00f6rmelisiniz.
\n * “filtered” olarak g\u00f6r\u00fcnen port (8080) i\u00e7in, sald\u0131rgan makineden gelen SYN paketlerini g\u00f6rebilirsiniz, ancak hedef sunucudan herhangi bir SYN\/ACK yan\u0131t\u0131 veya firewall’dan bir ICMP “Destination Unreachable” mesaj\u0131 g\u00f6rmemelisiniz. Bu, firewall’\u0131n paketi ba\u015far\u0131yla d\u00fc\u015f\u00fcrd\u00fc\u011f\u00fcn\u00fc g\u00f6sterir.<\/p>\n

Senaryo 2: Kapal\u0131\/Filtreli Portlar\u0131 Test Etme<\/h3>\n

Hedef:<\/strong> G\u00fcvenlik duvar\u0131n\u0131n, engellemesi gereken portlar\u0131 ger\u00e7ekten engelledi\u011fini do\u011frulamak.<\/p>\n

1. G\u00fcvenlik Duvar\u0131 Kural\u0131:<\/strong> D\u0131\u015far\u0131dan gelen 21 (FTP), 23 (Telnet) ve 3389 (RDP) gibi hassas portlara eri\u015fimi tamamen engelle.
\n2. Tcpdump \u00c7al\u0131\u015ft\u0131rma (Firewall’\u0131n D\u0131\u015f Aray\u00fcz\u00fcnde):<\/strong>
\n sudo tcpdump -nn -i eth0 host and (port 21 or port 23 or port 3389)<\/code>
\n3. Nmap \u00c7al\u0131\u015ft\u0131rma (Sald\u0131rgan Makinesinden):<\/strong>
\n nmap -sS -p 21,23,3389 <\/code>
\n4. Analiz:<\/strong>
\n * Nmap \u00c7\u0131kt\u0131s\u0131:<\/strong> T\u00fcm bu portlar “filtered” olarak g\u00f6r\u00fcnmelidir.
\n * Tcpdump \u00c7\u0131kt\u0131s\u0131:<\/strong> Sald\u0131rgan makineden gelen SYN paketlerini g\u00f6rebilirsiniz, ancak hedef sunucudan hi\u00e7bir yan\u0131t gelmemelidir. E\u011fer firewall, engelleme kural\u0131na g\u00f6re bir ICMP “Destination Unreachable” mesaj\u0131 g\u00f6nderiyorsa, bunu da Tcpdump \u00e7\u0131kt\u0131s\u0131nda g\u00f6rmelisiniz. E\u011fer Nmap “closed” derse ve Tcpdump’ta RST\/ACK g\u00f6r\u00fcrseniz, bu g\u00fcvenlik duvar\u0131n\u0131n paketi ge\u00e7irdi\u011fini ve hedefin portu kapatt\u0131\u011f\u0131n\u0131 g\u00f6sterir ki bu bir g\u00fcvenlik zafiyetidir.<\/p>\n

Senaryo 3: Durum Bilgisi Olan (Stateful) G\u00fcvenlik Duvarlar\u0131n\u0131 Test Etme<\/h3>\n

Hedef:<\/strong> G\u00fcvenlik duvar\u0131n\u0131n, d\u0131\u015far\u0131dan ba\u015flat\u0131lan ba\u011flant\u0131lar\u0131 engellerken, i\u00e7 a\u011fdan ba\u015flat\u0131lan ve d\u0131\u015far\u0131ya giden ba\u011flant\u0131lara izin verdi\u011fini do\u011frulamak.<\/p>\n

1. G\u00fcvenlik Duvar\u0131 Kural\u0131:<\/strong> \u0130\u00e7 a\u011fdan d\u0131\u015far\u0131ya giden t\u00fcm trafi\u011fe izin ver, ancak d\u0131\u015far\u0131dan i\u00e7 a\u011fa ba\u015flat\u0131lan t\u00fcm ba\u011flant\u0131lar\u0131 engelle (durum bilgisi olan denetim varsay\u0131larak).
\n2. Tcpdump \u00c7al\u0131\u015ft\u0131rma (Firewall’\u0131n D\u0131\u015f Aray\u00fcz\u00fcnde):<\/strong>
\n sudo tcpdump -nn -i eth0 host <\/code>
\n3. Nmap \u00c7al\u0131\u015ft\u0131rma (Sald\u0131rgan Makinesinden):<\/strong>
\n nmap -sA <\/code> (ACK taramas\u0131)
\n ACK taramas\u0131, bir ba\u011flant\u0131 kurulmadan ACK paketleri g\u00f6nderir. Durum bilgisi olan bir g\u00fcvenlik duvar\u0131, mevcut bir oturumla e\u015fle\u015fmeyen ACK paketlerini d\u00fc\u015f\u00fcrmelidir.
\n4. Analiz:<\/strong>
\n * Nmap \u00c7\u0131kt\u0131s\u0131:<\/strong> T\u00fcm portlar “filtered” olarak g\u00f6r\u00fcnmelidir. E\u011fer “unfiltered” olarak g\u00f6r\u00fcn\u00fcrse, bu g\u00fcvenlik duvar\u0131n\u0131n d\u0131\u015far\u0131dan gelen ACK paketlerini hedefe iletti\u011fi anlam\u0131na gelir ki bu bir g\u00fcvenlik zafiyetidir.
\n * Tcpdump \u00c7\u0131kt\u0131s\u0131:<\/strong> Sald\u0131rgan makineden gelen ACK paketlerini g\u00f6rmelisiniz, ancak hedef sunucudan herhangi bir RST yan\u0131t\u0131 gelmemelidir. E\u011fer RST yan\u0131tlar\u0131 g\u00f6r\u00fcyorsan\u0131z, firewall ACK paketlerini hedefe iletiyor demektir.<\/p>\n

Senaryo 4: Belirli IP Adreslerinden Eri\u015fimi Engelleme<\/h3>\n

Hedef:<\/strong> G\u00fcvenlik duvar\u0131n\u0131n, belirli bir kaynak IP adresinden gelen trafi\u011fi ba\u015far\u0131yla engelledi\u011fini do\u011frulamak.<\/p>\n

1. G\u00fcvenlik Duvar\u0131 Kural\u0131:<\/strong> 192.168.1.10<\/code> IP adresinden gelen t\u00fcm trafi\u011fi engelle.
\n2. Tcpdump \u00c7al\u0131\u015ft\u0131rma (Firewall’\u0131n D\u0131\u015f Aray\u00fcz\u00fcnde):<\/strong>
\n sudo tcpdump -nn -i eth0 src host 192.168.1.10 and dst host <\/code>
\n3. Nmap \u00c7al\u0131\u015ft\u0131rma (IP adresi 192.168.1.10 olan sald\u0131rgan makinesinden):<\/strong>
\n nmap -p 80 <\/code>
\n4. Analiz:<\/strong>
\n * Nmap \u00c7\u0131kt\u0131s\u0131:<\/strong> 80 numaral\u0131 port “filtered” olarak g\u00f6r\u00fcnmelidir.
\n * Tcpdump \u00c7\u0131kt\u0131s\u0131:<\/strong> 192.168.1.10<\/code> adresinden gelen SYN paketlerini g\u00f6rebilirsiniz, ancak bu paketlerin hedef sunucuya ula\u015fmad\u0131\u011f\u0131n\u0131 (yani firewall taraf\u0131ndan d\u00fc\u015f\u00fcr\u00fcld\u00fc\u011f\u00fcn\u00fc) ve hedef sunucudan veya firewall’dan herhangi bir yan\u0131t gelmedi\u011fini g\u00f6rmelisiniz.<\/p>\n

Senaryo 5: Nmap Betiklerini Kullanarak Daha \u0130leri Testler<\/h3>\n

Nmap Scripting Engine (NSE), g\u00fcvenlik duvar\u0131 testleri i\u00e7in daha geli\u015fmi\u015f senaryolar sunar.<\/p>\n

* Firewall Bypass Betikleri:<\/strong>
\n nmap --script firewall-bypass <\/code>
\n Bu betik, g\u00fcvenlik duvarlar\u0131n\u0131 atlatmaya y\u00f6nelik bilinen baz\u0131 teknikleri dener. Tcpdump ile bu beti\u011fin olu\u015fturdu\u011fu al\u0131\u015f\u0131lmad\u0131k paket dizilerini izleyebilirsiniz.
\n* Zay\u0131f Yap\u0131land\u0131rma Betikleri:<\/strong>
\n nmap --script ssl-enum-ciphers <\/code>
\n SSL\/TLS yap\u0131land\u0131rmas\u0131ndaki zay\u0131fl\u0131klar\u0131 (eski \u015fifreler, zay\u0131f protokoller) tespit eder. G\u00fcvenlik duvar\u0131, bu t\u00fcr zay\u0131f yap\u0131land\u0131rmalara izin veren portlar\u0131 filtrelemelidir.
\n* Servis Ke\u015ffi Betikleri:<\/strong>
\n nmap --script http-methods <\/code>
\n HTTP sunucusunun destekledi\u011fi HTTP metotlar\u0131n\u0131 (GET, POST, PUT, DELETE vb.) listeler. G\u00fcvenlik duvar\u0131n\u0131n bu metotlar\u0131 filtreleyip filtrelemedi\u011fini kontrol etmek i\u00e7in kullan\u0131labilir.<\/p>\n

Her betik \u00e7al\u0131\u015ft\u0131r\u0131ld\u0131\u011f\u0131nda, Tcpdump’\u0131 kullanarak g\u00fcvenlik duvar\u0131n\u0131n ilgili trafi\u011fe nas\u0131l tepki verdi\u011fini g\u00f6zlemlemek, firewall yap\u0131land\u0131rman\u0131z\u0131n derinlemesine anla\u015f\u0131lmas\u0131na yard\u0131mc\u0131 olacakt\u0131r.<\/p>\n

Test S\u00fcrecinde Dikkat Edilmesi Gerekenler<\/h2>\n

G\u00fcvenlik duvar\u0131 testleri yaparken, hem teknik hem de etik a\u00e7\u0131dan baz\u0131 \u00f6nemli noktalara dikkat etmek gerekir.<\/p>\n

* Yasal ve Etik S\u0131n\u0131rlar:<\/strong> G\u00fcvenlik duvar\u0131 testlerini her zaman yasal ve etik s\u0131n\u0131rlar i\u00e7inde yap\u0131n. Yaln\u0131zca kendi a\u011f\u0131n\u0131zda veya yetkili oldu\u011funuz sistemlerde test yap\u0131n. Yetkisiz a\u011flara yap\u0131lan taramalar yasa d\u0131\u015f\u0131d\u0131r ve ciddi sonu\u00e7lar\u0131 olabilir. Bir ba\u015fkas\u0131n\u0131n sistemini test etmeden \u00f6nce mutlaka yaz\u0131l\u0131 izin al\u0131n.
\n* Performans Etkisi:<\/strong> Yo\u011fun Nmap taramalar\u0131, \u00f6zellikle geni\u015f port aral\u0131klar\u0131 veya agresif se\u00e7enekler kullan\u0131ld\u0131\u011f\u0131nda, a\u011f performans\u0131n\u0131 olumsuz etkileyebilir. Hedef sistemlerde CPU, bellek veya a\u011f bant geni\u015fli\u011fi t\u00fcketimini art\u0131rabilir, hatta baz\u0131 eski veya zay\u0131f sistemlerin \u00e7\u00f6kmesine neden olabilir (Denial of Service – DoS). Testleri planl\u0131 bir \u015fekilde, d\u00fc\u015f\u00fck trafik saatlerinde veya izole bir test ortam\u0131nda yapmaya \u00f6zen g\u00f6sterin.
\n* Log Kay\u0131tlar\u0131:<\/strong> G\u00fcvenlik duvar\u0131n\u0131z\u0131n ve hedef sunucular\u0131n\u0131z\u0131n log kay\u0131tlar\u0131n\u0131 d\u00fczenli olarak kontrol edin. Nmap taramalar\u0131, g\u00fcvenlik duvar\u0131 loglar\u0131nda (\u00f6rne\u011fin, engellenen paketler, ba\u011flant\u0131 giri\u015fimleri) ve hedef sunucu loglar\u0131nda (\u00f6rne\u011fin, ba\u011flant\u0131 denemeleri, hata mesajlar\u0131) g\u00f6r\u00fcnmelidir. Bu loglar, g\u00fcvenlik duvar\u0131n\u0131n taramalara nas\u0131l tepki verdi\u011fini ve kurallar\u0131n do\u011fru \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 do\u011frulamak i\u00e7in kritik bir bilgi kayna\u011f\u0131d\u0131r. Loglarda beklenmeyen bir davran\u0131\u015f g\u00f6r\u00fcrseniz, bu bir g\u00fcvenlik zafiyetine veya yanl\u0131\u015f yap\u0131land\u0131rmaya i\u015faret edebilir.
\n* Yanl\u0131\u015f Pozitif\/Negatifler:<\/strong> Nmap sonu\u00e7lar\u0131 her zaman mutlak do\u011fruyu yans\u0131tmayabilir. Bazen Nmap “filtered” dese de, paketler hedefe ula\u015fm\u0131\u015f ve firewall taraf\u0131ndan sessizce d\u00fc\u015f\u00fcr\u00fclm\u00fc\u015f olabilir. Ya da Nmap “open” dese de, asl\u0131nda portun ba\u015fka bir mekanizma taraf\u0131ndan engellendi\u011fi durumlar olabilir. Bu t\u00fcr yanl\u0131\u015f pozitif veya negatif durumlar\u0131 tespit etmek i\u00e7in Tcpdump ile paket ak\u0131\u015f\u0131n\u0131 g\u00f6zlemlemek hayati \u00f6nem ta\u015f\u0131r. Nmap, size “ne” oldu\u011funu s\u00f6ylerken, Tcpdump “nas\u0131l” oldu\u011funu g\u00f6sterir.
\n* A\u011f Topolojisi ve Konumland\u0131rma:<\/strong> G\u00fcvenlik duvar\u0131n\u0131n a\u011fdaki konumu (\u00f6rne\u011fin, DMZ, i\u00e7 a\u011f, d\u0131\u015f a\u011f) test sonu\u00e7lar\u0131n\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde etkiler. Testi, farkl\u0131 a\u011f segmentlerinden (\u00f6rne\u011fin, internetten, DMZ’den, i\u00e7 a\u011fdan) yaparak, g\u00fcvenlik duvar\u0131n\u0131n her bir segmentteki trafi\u011fi nas\u0131l y\u00f6netti\u011fini anlamak \u00f6nemlidir.
\n* D\u00fczenli Testler:<\/strong> A\u011flar ve tehdit ortam\u0131 s\u00fcrekli de\u011fi\u015fti\u011fi i\u00e7in g\u00fcvenlik duvar\u0131 yap\u0131land\u0131rman\u0131z\u0131n d\u00fczenli olarak test edilmesi gerekir. Yeni uygulamalar, g\u00fcncellemeler veya a\u011fdaki de\u011fi\u015fiklikler, mevcut g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 ge\u00e7ersiz k\u0131labilir veya yeni g\u00fcvenlik a\u00e7\u0131klar\u0131 yaratabilir. Periyodik testler, g\u00fcvenlik duvar\u0131n\u0131z\u0131n her zaman en iyi \u015fekilde \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olman\u0131z\u0131 sa\u011flar.
\n* Otomasyon:<\/strong> B\u00fcy\u00fck a\u011flarda veya s\u0131k yap\u0131lan testlerde, Nmap ve Tcpdump testlerini otomatikle\u015ftirmek, verimlili\u011fi art\u0131rabilir ve insan hatas\u0131n\u0131 azaltabilir. Betikler veya otomasyon ara\u00e7lar\u0131 kullanarak bu s\u00fcreci kolayla\u015ft\u0131rabilirsiniz.
\n* Belgeleme:<\/strong> Yap\u0131lan testleri, bulunan sonu\u00e7lar\u0131, al\u0131nan \u00f6nlemleri ve g\u00fcvenlik duvar\u0131 kurallar\u0131ndaki de\u011fi\u015fiklikleri belgelemek, gelecekteki denetimler ve sorun giderme i\u00e7in kritik \u00f6neme sahiptir.<\/p>\n

Bu dikkat edilmesi gereken noktalar\u0131 g\u00f6z \u00f6n\u00fcnde bulundurarak, Nmap ve Tcpdump ile yap\u0131lan g\u00fcvenlik duvar\u0131 testleri, a\u011f g\u00fcvenli\u011finizi \u00f6nemli \u00f6l\u00e7\u00fcde g\u00fc\u00e7lendirecek de\u011ferli bilgiler sa\u011flayacakt\u0131r.<\/p>\n

Sonu\u00e7<\/h2>\n

G\u00fcvenlik duvarlar\u0131, modern a\u011f g\u00fcvenli\u011finin temel ta\u015flar\u0131ndan biri olup, yetkisiz eri\u015fime ve siber tehditlere kar\u015f\u0131 ilk savunma hatt\u0131n\u0131 olu\u015fturur. Ancak, bir g\u00fcvenlik duvar\u0131n\u0131n etkinli\u011fi, do\u011frudan yap\u0131land\u0131rmas\u0131n\u0131n do\u011frulu\u011fu ve g\u00fcncelli\u011fi ile orant\u0131l\u0131d\u0131r. Yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f veya g\u00fcncel olmayan bir g\u00fcvenlik duvar\u0131, a\u011f\u0131n\u0131z\u0131 beklenmedik g\u00fcvenlik a\u00e7\u0131klar\u0131na maruz b\u0131rakabilir. Bu nedenle, g\u00fcvenlik duvar\u0131 yap\u0131land\u0131rmas\u0131n\u0131n d\u00fczenli ve kapsaml\u0131 bir \u015fekilde test edilmesi, her a\u011f y\u00f6neticisi ve g\u00fcvenlik uzman\u0131 i\u00e7in vazge\u00e7ilmez bir g\u00f6revdir.<\/p>\n

Bu makalede ele ald\u0131\u011f\u0131m\u0131z Nmap ve Tcpdump ara\u00e7lar\u0131, bu g\u00f6revi yerine getirmek i\u00e7in son derece g\u00fc\u00e7l\u00fc ve tamamlay\u0131c\u0131 bir ikili sunar. Nmap, farkl\u0131 tarama teknikleri arac\u0131l\u0131\u011f\u0131yla a\u011f\u0131n\u0131zdaki a\u00e7\u0131k, kapal\u0131 veya filtreli portlar\u0131, \u00e7al\u0131\u015fan servisleri ve potansiyel zafiyetleri h\u0131zl\u0131 ve etkili bir \u015fekilde tespit etmenizi sa\u011flar. G\u00fcvenlik duvar\u0131n\u0131z\u0131n d\u0131\u015far\u0131dan gelen sald\u0131r\u0131lara kar\u015f\u0131 ne kadar diren\u00e7li oldu\u011funu anlamak i\u00e7in Nmap’in \u00e7e\u015fitli tarama tiplerini (SYN, ACK, UDP vb.) kullanmak, size de\u011ferli bir i\u00e7g\u00f6r\u00fc sunar.<\/p>\n

Tcpdump ise Nmap’in sa\u011flad\u0131\u011f\u0131 y\u00fczeysel bilgilerin \u00f6tesine ge\u00e7erek, paket d\u00fczeyinde derinlemesine bir analiz imkan\u0131 sunar. Nmap’in bir portu “filtered” olarak raporlad\u0131\u011f\u0131nda, Tcpdump sayesinde bu paketin g\u00fcvenlik duvar\u0131na ula\u015f\u0131p ula\u015fmad\u0131\u011f\u0131n\u0131, g\u00fcvenlik duvar\u0131n\u0131n paketi d\u00fc\u015f\u00fcr\u00fcp d\u00fc\u015f\u00fcrmedi\u011fini veya bir hata mesaj\u0131 d\u00f6nd\u00fcr\u00fcp d\u00f6nd\u00fcrmedi\u011fini do\u011frudan g\u00f6zlemleyebilirsiniz. Bu, g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131z\u0131n beklenen \u015fekilde \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frulamak veya beklenmedik davran\u0131\u015flar\u0131 tespit etmek i\u00e7in kritik bir ad\u0131md\u0131r. \u0130ki arac\u0131 bir arada kullanarak, sadece g\u00fcvenlik duvar\u0131n\u0131z\u0131n d\u0131\u015far\u0131dan nas\u0131l g\u00f6r\u00fcnd\u00fc\u011f\u00fcn\u00fc de\u011fil, ayn\u0131 zamanda paketlerin a\u011f i\u00e7inde nas\u0131l hareket etti\u011fini de tam olarak anlayabilirsiniz.<\/p>\n

G\u00fcvenlik duvar\u0131 test senaryolar\u0131 b\u00f6l\u00fcm\u00fcnde sundu\u011fumuz pratik \u00f6rnekler, bu iki arac\u0131n ger\u00e7ek d\u00fcnya senaryolar\u0131nda nas\u0131l entegre edilebilece\u011fini ve \u00e7e\u015fitli g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131n nas\u0131l do\u011frulanabilece\u011fini g\u00f6stermi\u015ftir. A\u00e7\u0131k ve kapal\u0131 portlar\u0131n do\u011frulanmas\u0131ndan, durum bilgisi olan g\u00fcvenlik duvarlar\u0131n\u0131n test edilmesine ve belirli IP adreslerinden gelen trafi\u011fin engellenmesine kadar, bu y\u00f6ntemler a\u011f\u0131n\u0131z\u0131n savunma mekanizmalar\u0131n\u0131 proaktif olarak de\u011ferlendirmenize olanak tan\u0131r.<\/p>\n

Unutulmamal\u0131d\u0131r ki, siber g\u00fcvenlik s\u00fcrekli bir s\u00fcre\u00e7tir. Tehdit ortam\u0131n\u0131n s\u00fcrekli evrim ge\u00e7irmesi, a\u011f yap\u0131land\u0131rmalar\u0131ndaki de\u011fi\u015fiklikler ve yeni uygulamalar\u0131n devreye al\u0131nmas\u0131, g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131n ve dolay\u0131s\u0131yla g\u00fcvenlik duvar\u0131 testlerinin d\u00fczenli olarak g\u00f6zden ge\u00e7irilmesini gerektirir. Yasal ve etik s\u0131n\u0131rlara riayet ederek, \u00fcretim ortam\u0131na zarar vermemeye \u00f6zen g\u00f6stererek ve elde edilen sonu\u00e7lar\u0131 dikkatle analiz ederek, Nmap ve Tcpdump ile yapaca\u011f\u0131n\u0131z testler, a\u011f g\u00fcvenli\u011finizi bir sonraki seviyeye ta\u015f\u0131yacak ve dijital varl\u0131klar\u0131n\u0131z\u0131 daha iyi koruman\u0131z\u0131 sa\u011flayacakt\u0131r. Bu ara\u00e7lar, sadece g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 tespit etmekle kalmay\u0131p, ayn\u0131 zamanda a\u011f\u0131n\u0131z\u0131n savunma mekanizmalar\u0131n\u0131 daha derinlemesine anlaman\u0131za ve s\u00fcrekli iyile\u015ftirmenize yard\u0131mc\u0131 olan de\u011ferli birer m\u00fcttefiktir.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Nmap ve Tcpdump ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rman\u0131z\u0131 Test Etme\nGiri\u015f\nG\u00fcn\u00fcm\u00fcz\u00fcn birbirine ba\u011fl\u0131 d\u00fcnyas\u0131nda, siber g\u00fcvenlik her zamanki","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-39458","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-genel","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nNmap ve Tcpdump ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rman\u0131z\u0131 Test Etme - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Nmap ve Tcpdump ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rman\u0131z\u0131 Test Etme\" \/>\n<meta property=\"og:description\" content=\"Nmap ve Tcpdump ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rman\u0131z\u0131 Test Etme Giri\u015f G\u00fcn\u00fcm\u00fcz\u00fcn birbirine ba\u011fl\u0131 d\u00fcnyas\u0131nda, siber g\u00fcvenlik her zamanki\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-21T16:40:58+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"25 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Nmap ve Tcpdump ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rman\u0131z\u0131 Test Etme\",\"datePublished\":\"2026-02-21T16:40:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/\"},\"wordCount\":4779,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/\",\"name\":\"Nmap ve Tcpdump ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rman\u0131z\u0131 Test Etme - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-02-21T16:40:58+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Nmap ve Tcpdump ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rman\u0131z\u0131 Test Etme\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Nmap ve Tcpdump ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rman\u0131z\u0131 Test Etme - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/","og_locale":"tr_TR","og_type":"article","og_title":"Nmap ve Tcpdump ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rman\u0131z\u0131 Test Etme","og_description":"Nmap ve Tcpdump ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rman\u0131z\u0131 Test Etme Giri\u015f G\u00fcn\u00fcm\u00fcz\u00fcn birbirine ba\u011fl\u0131 d\u00fcnyas\u0131nda, siber g\u00fcvenlik her zamanki","og_url":"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-02-21T16:40:58+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"25 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Nmap ve Tcpdump ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rman\u0131z\u0131 Test Etme","datePublished":"2026-02-21T16:40:58+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/"},"wordCount":4779,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/","url":"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/","name":"Nmap ve Tcpdump ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rman\u0131z\u0131 Test Etme - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-02-21T16:40:58+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/nmap-ve-tcpdump-ile-guvenlik-duvari-yapilandirmanizi-test-etme\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Nmap ve Tcpdump ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rman\u0131z\u0131 Test Etme"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/39458","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=39458"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/39458\/revisions"}],"predecessor-version":[{"id":39459,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/39458\/revisions\/39459"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=39458"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=39458"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=39458"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}