SSH G\u00fcvenli\u011fini Sa\u011flamla\u015ft\u0131rma: Fail2Ban, Nftables ve Bulut G\u00fcvenlik Duvarlar\u0131<\/title><br \/>\n<body><\/p>\n<p>\n Sunucu g\u00fcvenli\u011fi, dijital d\u00fcnyan\u0131n temel ta\u015flar\u0131ndan biridir ve bu g\u00fcvenli\u011fin kilit noktalar\u0131ndan biri de SSH (Secure Shell) eri\u015fimidir. Peki, sunucular\u0131n\u0131z\u0131 s\u00fcrekli tehdit eden siber sald\u0131r\u0131lara kar\u015f\u0131 SSH ba\u011flant\u0131lar\u0131n\u0131z\u0131 nas\u0131l \u00e7elik gibi sa\u011flam hale getirebilirsiniz? Bu makale, sunucular\u0131n\u0131z\u0131 yetkisiz eri\u015fimlerden korumak i\u00e7in Fail2Ban, Nftables ve bulut g\u00fcvenlik duvarlar\u0131 gibi g\u00fc\u00e7l\u00fc ara\u00e7lar\u0131 nas\u0131l kullanaca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m a\u00e7\u0131klayarak, sistemlerinizi siber tehditlere kar\u015f\u0131 daha diren\u00e7li hale getirme yollar\u0131n\u0131 sunuyor.\n <\/p>\n<h2>SSH G\u00fcvenli\u011fi Neden Bu Kadar \u00d6nemli ve Kar\u015f\u0131la\u015f\u0131lan Riskler Nelerdir?<\/h2>\n<p>\n SSH, uzak sunuculara g\u00fcvenli bir \u015fekilde ba\u011flanmak, dosya transferi yapmak ve komut \u00e7al\u0131\u015ft\u0131rmak i\u00e7in kullan\u0131lan kritik bir protokold\u00fcr. Sistem y\u00f6neticileri ve geli\u015ftiriciler i\u00e7in vazge\u00e7ilmez bir ara\u00e7 olan SSH, ayn\u0131 zamanda k\u00f6t\u00fc niyetli akt\u00f6rlerin hedefi haline gelebilir. Zira bir sunucuya SSH \u00fczerinden yetkisiz eri\u015fim sa\u011flanmas\u0131, veri ihlallerinden sistemin tamamen ele ge\u00e7irilmesine kadar ciddi sonu\u00e7lar do\u011furabilir. Bu nedenle, SSH g\u00fcvenli\u011fini sa\u011flamla\u015ft\u0131rmak, herhangi bir sunucu y\u00f6netim stratejisinin en temel ve en \u00f6nemli ad\u0131mlar\u0131ndan biridir.\n <\/p>\n<p>\n G\u00fcn\u00fcm\u00fczde siber sald\u0131r\u0131lar s\u00fcrekli evrim ge\u00e7irmekte ve bu sald\u0131r\u0131lar\u0131n b\u00fcy\u00fck bir k\u0131sm\u0131, SSH gibi standart hizmetleri hedef almaktad\u0131r. En yayg\u0131n sald\u0131r\u0131 t\u00fcrlerinden biri “brute-force” sald\u0131r\u0131lar\u0131d\u0131r. Bu t\u00fcr sald\u0131r\u0131larda, sald\u0131rganlar binlerce, hatta milyonlarca farkl\u0131 kullan\u0131c\u0131 ad\u0131 ve parola kombinasyonunu deneyerek sisteme giri\u015f yapmaya \u00e7al\u0131\u015f\u0131r. E\u011fer sunucunuz bu t\u00fcr sald\u0131r\u0131lara kar\u015f\u0131 yeterince korunmas\u0131zsa, g\u00fc\u00e7l\u00fc olmayan bir parola veya varsay\u0131lan bir kullan\u0131c\u0131 ad\u0131 kolayca tahmin edilebilir ve sisteminize yetkisiz eri\u015fim sa\u011flanabilir. Di\u011fer bir risk ise, zay\u0131f yap\u0131land\u0131r\u0131lm\u0131\u015f SSH hizmetlerinin kullan\u0131lmas\u0131d\u0131r; \u00f6rne\u011fin, parola ile kimlik do\u011frulaman\u0131n anahtar tabanl\u0131 kimlik do\u011frulamadan daha az g\u00fcvenli olmas\u0131 veya SSH portunun varsay\u0131lan 22’de b\u0131rak\u0131lmas\u0131, sald\u0131rganlar\u0131n i\u015fini kolayla\u015ft\u0131rabilir.\n <\/p>\n<p>\n Bir ba\u015fka \u00f6nemli risk fakt\u00f6r\u00fc, sunucular\u0131n\u0131z\u0131n yaz\u0131l\u0131m g\u00fcncellemelerinin ihmal edilmesidir. SSH sunucu yaz\u0131l\u0131mlar\u0131ndaki (\u00f6rne\u011fin OpenSSH) g\u00fcvenlik a\u00e7\u0131klar\u0131 d\u00fczenli olarak tespit edilmekte ve yamalar yay\u0131nlanmaktad\u0131r. Bu yamalar\u0131n zaman\u0131nda uygulanmamas\u0131, bilinen g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n s\u00f6m\u00fcr\u00fclmesine davetiye \u00e7\u0131karabilir. Ayr\u0131ca, sunucunuzun a\u011f katman\u0131ndaki korunmas\u0131zl\u0131\u011f\u0131 da b\u00fcy\u00fck bir risktir. G\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131n yetersiz olmas\u0131, sunucunuzun do\u011frudan internete a\u00e7\u0131k kalmas\u0131na ve potansiyel DDoS (Distributed Denial of Service) sald\u0131r\u0131lar\u0131na maruz kalmas\u0131na neden olabilir. Bu t\u00fcr sald\u0131r\u0131lar, sunucunuzun kaynaklar\u0131n\u0131 t\u00fcketerek hizmet d\u0131\u015f\u0131 kalmas\u0131na yol a\u00e7ar. Bu karma\u015f\u0131k tehdit ortam\u0131nda, SSH g\u00fcvenli\u011fini art\u0131rmak i\u00e7in katmanl\u0131 bir savunma stratejisi benimsemek hayati \u00f6nem ta\u015f\u0131r. Bu strateji, hem sunucu seviyesinde yaz\u0131l\u0131msal \u00f6nlemleri hem de a\u011f katman\u0131nda donan\u0131msal veya bulut tabanl\u0131 g\u00fcvenlik duvarlar\u0131n\u0131 kapsamal\u0131d\u0131r.\n <\/p>\n<h2>Fail2Ban ile Otomatik Sald\u0131r\u0131lar\u0131 Nas\u0131l Engellersiniz?<\/h2>\n<p>\n Fail2Ban, Linux sunucular\u0131nda \u00e7al\u0131\u015fan, g\u00fcnl\u00fck dosyalar\u0131n\u0131 izleyerek otomatik sald\u0131r\u0131lar\u0131 (\u00f6zellikle brute-force sald\u0131r\u0131lar\u0131n\u0131) tespit eden ve bu sald\u0131r\u0131lar\u0131 ger\u00e7ekle\u015ftiren IP adreslerini ge\u00e7ici veya kal\u0131c\u0131 olarak engelleyen g\u00fc\u00e7l\u00fc bir ara\u00e7t\u0131r. Bu ara\u00e7, sunucunuzun savunmas\u0131nda \u00f6nemli bir ilk hatt\u0131 olu\u015fturur ve sald\u0131rganlar\u0131n s\u00fcrekli denemelerle sisteminizi ele ge\u00e7irme \u00e7abalar\u0131n\u0131 b\u00fcy\u00fck \u00f6l\u00e7\u00fcde bo\u015fa \u00e7\u0131kar\u0131r. Fail2Ban, SSH’in yan\u0131 s\u0131ra Apache, Nginx, FTP sunucular\u0131 ve e-posta hizmetleri gibi di\u011fer bir\u00e7ok hizmet i\u00e7in de kullan\u0131labilir. Temel \u00e7al\u0131\u015fma prensibi, belirli bir zaman diliminde ba\u015far\u0131s\u0131z oturum a\u00e7ma denemeleri gibi k\u00f6t\u00fc niyetli davran\u0131\u015flar\u0131 g\u00f6steren g\u00fcnl\u00fck girdilerini taramakt\u0131r.\n <\/p>\n<p>\n Fail2Ban’\u0131 bir Linux sunucusuna kurmak olduk\u00e7a basittir. \u00c7o\u011fu da\u011f\u0131t\u0131m\u0131n paket y\u00f6neticisinde bulunur. \u00d6rne\u011fin, Debian\/Ubuntu tabanl\u0131 sistemlerde a\u015fa\u011f\u0131daki komutla kolayca kurulabilir:\n <\/p>\n<pre><code>\nsudo apt update\nsudo apt install fail2ban\n <\/code><\/pre>\n<p>\n Kurulum tamamland\u0131ktan sonra, Fail2Ban otomatik olarak arka planda \u00e7al\u0131\u015fmaya ba\u015flar. Ancak, varsay\u0131lan yap\u0131land\u0131rma \u00e7o\u011fu zaman yeterli olmayabilir. Fail2Ban’\u0131n yap\u0131land\u0131rma dosyalar\u0131 genellikle <code>\/etc\/fail2ban\/<\/code> dizininde bulunur. Ana yap\u0131land\u0131rma dosyas\u0131 <code>jail.conf<\/code>‘tur, ancak bu dosyay\u0131 do\u011frudan d\u00fczenlemek yerine, <code>jail.local<\/code> ad\u0131nda bir kopya olu\u015fturup \u00fczerinde de\u011fi\u015fiklik yapmak en iyi uygulamad\u0131r. B\u00f6ylece, yaz\u0131l\u0131m g\u00fcncellemeleri s\u0131ras\u0131nda orijinal dosyan\u0131n \u00fczerine yaz\u0131lmas\u0131n\u0131n \u00f6n\u00fcne ge\u00e7ilir.\n <\/p>\n<pre><code>\nsudo cp \/etc\/fail2ban\/jail.conf \/etc\/fail2ban\/jail.local\nsudo nano \/etc\/fail2ban\/jail.local\n <\/code><\/pre>\n<p>\n <code>jail.local<\/code> dosyas\u0131n\u0131 a\u00e7t\u0131\u011f\u0131n\u0131zda, bir dizi “jail” (h\u00fccre) tan\u0131mlamas\u0131 g\u00f6receksiniz. Her jail, belirli bir hizmete (\u00f6rne\u011fin SSH, Apache) y\u00f6nelik koruma kurallar\u0131n\u0131 i\u00e7erir. SSH i\u00e7in genellikle <code>[sshd]<\/code> jail’i kullan\u0131l\u0131r. Bu b\u00f6l\u00fcm\u00fc bularak a\u015fa\u011f\u0131daki gibi ayarlar\u0131 de\u011fi\u015ftirebilirsiniz:\n <\/p>\n<pre><code>\n[DEFAULT]\nbantime = 1h ; Engelleme s\u00fcresi (1 saat)\nfindtime = 10m ; Bu s\u00fcre i\u00e7inde ba\u015far\u0131s\u0131z deneme aran\u0131r (10 dakika)\nmaxretry = 5 ; Engellemeden \u00f6nce izin verilen maksimum ba\u015far\u0131s\u0131z deneme say\u0131s\u0131 (5 deneme)\ndestemail = admin@example.com ; E-posta bildirimleri i\u00e7in\nsendername = Fail2Ban ; E-posta g\u00f6nderen ad\u0131\nmta = sendmail ; E-posta g\u00f6nderme ajan\u0131\n\n[sshd]\nenabled = true ; SSH korumas\u0131n\u0131 etkinle\u015ftir\nport = ssh ; SSH portu (varsay\u0131lan 22 veya de\u011fi\u015ftirdiyseniz yeni portunuz)\nfilter = sshd ; SSH filtreleme kural\u0131\nlogpath = \/var\/log\/auth.log ; SSH g\u00fcnl\u00fck dosyas\u0131n\u0131n yolu\naction = %(action_mwl)s ; Engelleme ve e-posta bildirimi i\u00e7in aksiyon\n <\/code><\/pre>\n<p>\n Yukar\u0131daki \u00f6rnekte, bir IP adresi 10 dakika i\u00e7inde 5 kez SSH ba\u011flant\u0131s\u0131 denemesinde ba\u015far\u0131s\u0131z olursa, 1 saat boyunca engellenecektir. Ayr\u0131ca, bir engelleme oldu\u011funda belirtilen e-posta adresine bildirim g\u00f6nderilecektir. Bu ayarlar\u0131 kendi g\u00fcvenlik ihtiya\u00e7lar\u0131n\u0131za g\u00f6re optimize etmeniz \u00f6nemlidir. De\u011fi\u015fiklikleri kaydettikten sonra Fail2Ban hizmetini yeniden ba\u015flatmay\u0131 unutmay\u0131n:\n <\/p>\n<pre><code>\nsudo systemctl restart fail2ban\n <\/code><\/pre>\n<p>\n <strong>Vaka Analizi: Bir Web Sunucusunda Brute-Force Sald\u0131r\u0131lar\u0131n\u0131n \u00d6nlenmesi<\/strong><br \/>\n Bir e-ticaret sitesi bar\u0131nd\u0131ran sunucumuzun, son zamanlarda s\u00fcrekli olarak d\u00fcnyan\u0131n farkl\u0131 yerlerinden gelen SSH brute-force sald\u0131r\u0131lar\u0131na maruz kald\u0131\u011f\u0131n\u0131 varsayal\u0131m. Sunucu g\u00fcnl\u00fckleri, her birka\u00e7 dakikada bir y\u00fczlerce ba\u015far\u0131s\u0131z SSH giri\u015f denemesiyle dolup ta\u015f\u0131yor, bu da sistem kaynaklar\u0131n\u0131 gereksiz yere t\u00fcketiyor ve potansiyel bir g\u00fcvenlik riskini olu\u015fturuyordu. Bu durumu \u00e7\u00f6zmek i\u00e7in sunucuya Fail2Ban kuruldu ve <code>jail.local<\/code> dosyas\u0131 yukar\u0131daki ayarlara benzer \u015fekilde yap\u0131land\u0131r\u0131ld\u0131. \u0130lk birka\u00e7 saat i\u00e7inde, Fail2Ban binlerce farkl\u0131 IP adresini tespit edip engellemeye ba\u015flad\u0131. Sunucu y\u00f6neticileri, <code>fail2ban-client status sshd<\/code> komutunu kullanarak engellenen IP adreslerini ve deneme say\u0131lar\u0131n\u0131 izleyebiliyordu. K\u0131sa s\u00fcre sonra, sunucu g\u00fcnl\u00fcklerindeki ba\u015far\u0131s\u0131z SSH denemeleri dramatik bir \u015fekilde azald\u0131 ve sunucunun genel performans\u0131 da g\u00f6zle g\u00f6r\u00fcl\u00fcr \u015fekilde iyile\u015fti. Bu vaka, Fail2Ban’\u0131n otomatik sald\u0131r\u0131lara kar\u015f\u0131 ne kadar etkili ve vazge\u00e7ilmez bir savunma mekanizmas\u0131 oldu\u011funu a\u00e7\u0131k\u00e7a g\u00f6stermektedir.\n <\/p>\n<h2>Nftables ile Sunucu Seviyesinde G\u00fcvenlik Duvar\u0131 Nas\u0131l Kurulur?<\/h2>\n<p>\n Fail2Ban, sald\u0131r\u0131lar\u0131 g\u00fcnl\u00fckler \u00fczerinden tespit edip engellerken, Nftables (veya eski ad\u0131yla Iptables), a\u011f trafi\u011fini paket seviyesinde filtreleyerek sunucunuza gelen ve giden t\u00fcm ba\u011flant\u0131lar\u0131 kontrol eden bir g\u00fcvenlik duvar\u0131 \u00e7\u00f6z\u00fcm\u00fcd\u00fcr. Nftables, Linux \u00e7ekirde\u011finin netfilter \u00e7er\u00e7evesinin modern bir bile\u015fenidir ve Iptables’a g\u00f6re daha esnek, daha performansl\u0131 ve daha kolay y\u00f6netilebilir bir yap\u0131 sunar. G\u00fcvenlik duvar\u0131, sunucunuzun savunma hatt\u0131n\u0131n en temel katmanlar\u0131ndan biridir; adeta bir kale duvar\u0131 gibi, yaln\u0131zca izin verilen trafi\u011fin i\u00e7eri girmesine veya d\u0131\u015far\u0131 \u00e7\u0131kmas\u0131na olanak tan\u0131r.\n <\/p>\n<p>\n Nftables’\u0131 kullanmaya ba\u015flamadan \u00f6nce, sisteminizde kurulu oldu\u011fundan emin olmal\u0131s\u0131n\u0131z. \u00c7o\u011fu modern Linux da\u011f\u0131t\u0131m\u0131nda varsay\u0131lan olarak gelir. E\u011fer y\u00fckl\u00fc de\u011filse, a\u015fa\u011f\u0131daki gibi kurabilirsiniz:\n <\/p>\n<pre><code>\nsudo apt update\nsudo apt install nftables\n <\/code><\/pre>\n<p>\n Nftables, kurallar\u0131 “tablo” ve “zincir” ad\u0131 verilen yap\u0131lar i\u00e7inde tan\u0131mlar. Her tablo, belirli bir adres ailesi (IPv4, IPv6) veya ama\u00e7 i\u00e7in bir dizi zincir i\u00e7erir. Zincirler ise paketlerin nas\u0131l i\u015flenece\u011fini belirleyen kurallar\u0131 bar\u0131nd\u0131r\u0131r. Temel olarak, t\u00fcm gelen (input), giden (output) ve y\u00f6nlendirilen (forward) trafi\u011fi kontrol edersiniz. G\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131z\u0131 olu\u015ftururken “varsay\u0131lan reddet” politikas\u0131n\u0131 benimsemek en g\u00fcvenli yakla\u015f\u0131md\u0131r. Bu, a\u00e7\u0131k\u00e7a izin vermedi\u011finiz s\u00fcrece t\u00fcm trafi\u011fin engellenmesi anlam\u0131na gelir.\n <\/p>\n<p>\n \u00d6rnek bir Nftables yap\u0131land\u0131rmas\u0131 olu\u015ftural\u0131m. \u0130lk olarak, mevcut kurallar\u0131 temizleyip varsay\u0131lan politikalar\u0131 ayarlayabiliriz:\n <\/p>\n<pre><code>\nsudo nft flush ruleset\nsudo nft add table ip filter\nsudo nft add chain ip filter input { type filter hook input priority 0; policy drop; }\nsudo nft add chain ip filter forward { type filter hook forward priority 0; policy drop; }\nsudo nft add chain ip filter output { type filter hook output priority 0; policy accept; }\n <\/code><\/pre>\n<p>\n Bu komutlar, IPv4 i\u00e7in “filter” ad\u0131nda bir tablo olu\u015fturur ve “input”, “forward” zincirlerinin varsay\u0131lan politikas\u0131n\u0131 “drop” (reddet) olarak ayarlar. “output” zinciri ise “accept” (kabul et) olarak ayarlan\u0131r, b\u00f6ylece sunucunuzdan d\u0131\u015far\u0131ya giden ba\u011flant\u0131larda sorun ya\u015famazs\u0131n\u0131z. \u015eimdi, SSH ba\u011flant\u0131lar\u0131na izin veren bir kural ekleyelim:\n <\/p>\n<pre><code>\nsudo nft add rule ip filter input iif \"lo\" accept ; Loopback trafi\u011fine izin ver\nsudo nft add rule ip filter input ct state established,related accept ; Mevcut ve ilgili ba\u011flant\u0131lara izin ver\nsudo nft add rule ip filter input tcp dport 22 accept ; SSH (port 22) trafi\u011fine izin ver\nsudo nft add rule ip filter input icmp type echo-request accept ; Ping iste\u011fine izin ver (iste\u011fe ba\u011fl\u0131)\n <\/code><\/pre>\n<p>\n Bu kurallar s\u0131ras\u0131yla:\n <\/p>\n<ul>\n<li>Loopback aray\u00fcz\u00fcnden gelen trafi\u011fe izin verir (<code>lo<\/code>).<\/li>\n<li>Daha \u00f6nce ba\u015flat\u0131lm\u0131\u015f veya mevcut bir ba\u011flant\u0131yla ilgili olan t\u00fcm trafi\u011fe izin verir (<code>ct state established,related<\/code>). Bu, sunucunun d\u0131\u015far\u0131ya ba\u015flatt\u0131\u011f\u0131 bir ba\u011flant\u0131ya gelen yan\u0131tlar\u0131n engellenmemesini sa\u011flar.<\/li>\n<li>TCP protokol\u00fc \u00fczerinden 22 numaral\u0131 porta (SSH) gelen trafi\u011fe izin verir. E\u011fer SSH portunuzu de\u011fi\u015ftirdiyseniz, 22 yerine yeni port numaran\u0131z\u0131 yazmal\u0131s\u0131n\u0131z.<\/li>\n<li>ICMP ping isteklerine izin verir. Bu, sunucunuzun ula\u015f\u0131labilirli\u011fini test etmek i\u00e7in faydal\u0131 olabilir, ancak g\u00fcvenlik a\u00e7\u0131s\u0131ndan kapat\u0131lmas\u0131 da d\u00fc\u015f\u00fcn\u00fclebilir.<\/li>\n<\/ul>\n<p>\n Bu kurallar anl\u0131k olarak uygulan\u0131r, ancak sunucu yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda kaybolurlar. Kurallar\u0131 kal\u0131c\u0131 hale getirmek i\u00e7in, genellikle Nftables hizmetini etkinle\u015ftirmeniz ve kurallar\u0131n\u0131z\u0131 bir dosyaya kaydetmeniz gerekir:\n <\/p>\n<pre><code>\nsudo nft list ruleset > \/etc\/nftables.conf\nsudo systemctl enable nftables\nsudo systemctl start nftables\n <\/code><\/pre>\n<p>\n Bu ad\u0131mlar, mevcut kurallar\u0131n\u0131z\u0131 <code>\/etc\/nftables.conf<\/code> dosyas\u0131na kaydeder ve Nftables hizmetini her ba\u015flang\u0131\u00e7ta bu kurallar\u0131 y\u00fckleyecek \u015fekilde yap\u0131land\u0131r\u0131r. Daha sonra, <code>\/etc\/nftables.conf<\/code> dosyas\u0131n\u0131 d\u00fczenleyerek veya <code>nft add rule<\/code> komutlar\u0131n\u0131 kullanarak kurallar\u0131n\u0131z\u0131 y\u00f6netebilirsiniz.\n <\/p>\n<p>\n <strong>Vaka Analizi: Bir Web Sunucusunda Sadece Gerekli Portlar\u0131n A\u00e7\u0131k B\u0131rak\u0131lmas\u0131<\/strong><br \/>\n K\u00fc\u00e7\u00fck bir i\u015fletme i\u00e7in tasarlanm\u0131\u015f bir web sunucusunun (Apache ve MySQL \u00e7al\u0131\u015ft\u0131ran) g\u00fcvenlik denetimi s\u0131ras\u0131nda, sunucunun varsay\u0131lan olarak bir\u00e7ok portunun d\u0131\u015far\u0131ya a\u00e7\u0131k oldu\u011fu tespit edildi. Bu durum, potansiyel sald\u0131r\u0131 y\u00fczeyini geni\u015fletiyor ve gereksiz riskler olu\u015fturuyordu. \u00c7\u00f6z\u00fcm olarak, sunucuya Nftables entegre edildi. \u0130lk ad\u0131mda, t\u00fcm gelen trafi\u011fi reddetme politikas\u0131 uyguland\u0131. Ard\u0131ndan, sadece HTTP (port 80), HTTPS (port 443) ve SSH (port 22, belirli IP adreslerinden) portlar\u0131na izin veren kurallar tan\u0131mland\u0131. MySQL veritaban\u0131 sadece web sunucusu i\u00e7inden eri\u015filebilir olacak \u015fekilde yap\u0131land\u0131r\u0131ld\u0131, yani d\u0131\u015far\u0131dan port 3306’ya eri\u015fim tamamen engellendi. Bu yap\u0131land\u0131rma sayesinde, sunucu d\u0131\u015far\u0131dan gelebilecek gereksiz sald\u0131r\u0131lara kar\u015f\u0131 \u00e7ok daha diren\u00e7li hale geldi ve sadece i\u015flevselli\u011fi i\u00e7in gerekli olan portlar a\u00e7\u0131k b\u0131rak\u0131larak g\u00fcvenlik duru\u015fu \u00f6nemli \u00f6l\u00e7\u00fcde iyile\u015ftirildi. Nftables’\u0131n esnekli\u011fi sayesinde, bu kurallar kolayca y\u00f6netilebildi ve gerekti\u011finde g\u00fcncellenebildi.\n <\/p>\n<h2>Bulut G\u00fcvenlik Duvarlar\u0131 ile A\u011f Katman\u0131nda Koruma Nas\u0131l Sa\u011flan\u0131r?<\/h2>\n<p>\n Fail2Ban sunucu seviyesinde, Nftables ise i\u015fletim sistemi seviyesinde koruma sa\u011flarken, bulut g\u00fcvenlik duvarlar\u0131 (Cloud Firewalls) a\u011f katman\u0131nda, yani sunucular\u0131n\u0131za ula\u015fmadan \u00e7ok \u00f6nce bir koruma katman\u0131 olu\u015fturur. AWS Security Groups, Azure Network Security Groups (NSG) ve Google Cloud Platform (GCP) Firewall Rules gibi hizmetler, bulut altyap\u0131lar\u0131nda sanal makinelerinizin (VM’ler) ve di\u011fer kaynaklar\u0131n\u0131z\u0131n a\u011f trafi\u011fini kontrol etmek i\u00e7in vazge\u00e7ilmezdir. Bu g\u00fcvenlik duvarlar\u0131, genellikle sanal \u00f6zel bulut (VPC) seviyesinde veya alt a\u011f (subnet) seviyesinde \u00e7al\u0131\u015f\u0131r ve gelen\/giden trafi\u011fi IP adresi, port numaras\u0131 ve protokol baz\u0131nda filtrelemenize olanak tan\u0131r.\n <\/p>\n<p>\n Bulut g\u00fcvenlik duvarlar\u0131n\u0131n temel prensibi, “izin verilenler listesi” (allowlist) yakla\u015f\u0131m\u0131n\u0131 benimsemektir. Yani, a\u00e7\u0131k\u00e7a izin vermedi\u011finiz s\u00fcrece t\u00fcm trafik engellenir. Bu, sunucular\u0131n\u0131za ula\u015fmaya \u00e7al\u0131\u015fan k\u00f6t\u00fc niyetli trafi\u011fi daha en ba\u015fta, yani bulut sa\u011flay\u0131c\u0131n\u0131z\u0131n a\u011f\u0131nda durdurarak, sunucular\u0131n\u0131z\u0131n \u00fczerindeki y\u00fck\u00fc azalt\u0131r ve kaynak t\u00fcketimini \u00f6nler. Ayr\u0131ca, bu t\u00fcr g\u00fcvenlik duvarlar\u0131 genellikle durum bilgisi olan (stateful) yap\u0131da \u00e7al\u0131\u015f\u0131r, yani bir ba\u011flant\u0131 kurulduktan sonra, ilgili t\u00fcm gelen ve giden trafi\u011fe otomatik olarak izin verir.\n <\/p>\n<p>\n <strong>AWS Security Groups \u00d6rne\u011fi:<\/strong><br \/>\n Amazon Web Services (AWS) \u00fczerinde bir EC2 instance’\u0131 ba\u015flatt\u0131\u011f\u0131n\u0131zda, ona bir veya daha fazla Security Group ataman\u0131z gerekir. Security Group’lar, instance’\u0131n\u0131za gelen ve giden a\u011f trafi\u011fini kontrol eden sanal g\u00fcvenlik duvarlar\u0131d\u0131r. \u00d6rne\u011fin, SSH eri\u015fimi i\u00e7in bir Security Group kural\u0131 \u015f\u00f6yle tan\u0131mlanabilir:\n <\/p>\n<table border=\"1\">\n<thead>\n<tr>\n<th>T\u00fcr<\/th>\n<th>Protokol<\/th>\n<th>Port Aral\u0131\u011f\u0131<\/th>\n<th>Kaynak<\/th>\n<th>A\u00e7\u0131klama<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>SSH<\/td>\n<td>TCP<\/td>\n<td>22<\/td>\n<td>0.0.0.0\/0 (T\u00fcm IP’ler)<\/td>\n<td>SSH Eri\u015fimi<\/td>\n<\/tr>\n<tr>\n<td>HTTP<\/td>\n<td>TCP<\/td>\n<td>80<\/td>\n<td>0.0.0.0\/0<\/td>\n<td>Web Eri\u015fimi<\/td>\n<\/tr>\n<tr>\n<td>HTTPS<\/td>\n<td>TCP<\/td>\n<td>443<\/td>\n<td>0.0.0.0\/0<\/td>\n<td>G\u00fcvenli Web Eri\u015fimi<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\n Bu \u00f6rnekte, t\u00fcm IP adreslerinden 22 numaral\u0131 porta SSH eri\u015fimine izin verilmi\u015ftir. Ancak daha g\u00fcvenli bir yakla\u015f\u0131m, SSH eri\u015fimini yaln\u0131zca belirli bir IP aral\u0131\u011f\u0131ndan (\u00f6rne\u011fin ofisinizin veya VPN’inizin IP adresi) gelen trafi\u011fe k\u0131s\u0131tlamakt\u0131r. \u00d6rne\u011fin, <code>192.168.1.0\/24<\/code> gibi bir CIDR blo\u011fu belirleyebilirsiniz. Bu, bir sald\u0131rgan\u0131n sunucunuza ula\u015fmak i\u00e7in brute-force denemeleri yapmas\u0131n\u0131 \u00e7ok daha zor hale getirir, \u00e7\u00fcnk\u00fc denemeleri daha bulut g\u00fcvenlik duvar\u0131 seviyesinde engellenir.\n <\/p>\n<p>\n <strong>Azure Network Security Groups (NSG) \u00d6rne\u011fi:<\/strong><br \/>\n Azure’da NSG’ler, sanal a\u011f aray\u00fczlerine (NIC), VM’lere veya alt a\u011flara uygulanabilir. NSG kurallar\u0131, \u00f6ncelik s\u0131ras\u0131na g\u00f6re i\u015flenir. Daha d\u00fc\u015f\u00fck bir \u00f6ncelik numaras\u0131 (\u00f6rne\u011fin 100) daha y\u00fcksek bir \u00f6ncelik anlam\u0131na gelir.\n <\/p>\n<table border=\"1\">\n<thead>\n<tr>\n<th>\u00d6ncelik<\/th>\n<th>Y\u00f6n<\/th>\n<th>Kaynak<\/th>\n<th>Kaynak Port<\/th>\n<th>Hedef<\/th>\n<th>Hedef Port<\/th>\n<th>Protokol<\/th>\n<th>Aksiyon<\/th>\n<th>A\u00e7\u0131klama<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>100<\/td>\n<td>Gelen<\/td>\n<td>Any<\/td>\n<td>Any<\/td>\n<td>Any<\/td>\n<td>22<\/td>\n<td>TCP<\/td>\n<td>Reddet<\/td>\n<td>T\u00fcm SSH Denemelerini Engelle<\/td>\n<\/tr>\n<tr>\n<td>110<\/td>\n<td>Gelen<\/td>\n<td>1.2.3.4<\/td>\n<td>Any<\/td>\n<td>Any<\/td>\n<td>22<\/td>\n<td>TCP<\/td>\n<td>\u0130zin Ver<\/td>\n<td>Y\u00f6netici IP’sinden SSH’e \u0130zin Ver<\/td>\n<\/tr>\n<tr>\n<td>120<\/td>\n<td>Gelen<\/td>\n<td>Any<\/td>\n<td>Any<\/td>\n<td>Any<\/td>\n<td>80, 443<\/td>\n<td>TCP<\/td>\n<td>\u0130zin Ver<\/td>\n<td>Web Trafi\u011fine \u0130zin Ver<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\n Bu Azure NSG \u00f6rne\u011finde, ilk kural t\u00fcm SSH denemelerini engellerken, ikinci kural belirli bir y\u00f6netici IP adresinden gelen SSH trafi\u011fine izin verir. Bu, \u00e7ok daha s\u0131k\u0131 bir g\u00fcvenlik duru\u015fu sa\u011flar.\n <\/p>\n<p>\n <strong>Vaka Analizi: Bir VPC \u0130\u00e7inde Birden Fazla Sunucuyu Koruma<\/strong><br \/>\n B\u00fcy\u00fck bir yaz\u0131l\u0131m geli\u015ftirme \u015firketinin, bulutta bar\u0131nd\u0131r\u0131lan ve farkl\u0131 i\u015flevlere sahip (veritaban\u0131, web sunucusu, uygulama sunucusu) birden fazla sanal sunucusu bulunuyordu. Bu sunucular, ayn\u0131 VPC i\u00e7inde farkl\u0131 alt a\u011flarda konumland\u0131r\u0131lm\u0131\u015ft\u0131. Ba\u015flang\u0131\u00e7ta, her sunucunun kendi Nftables g\u00fcvenlik duvar\u0131 vard\u0131, ancak bu durum merkezi y\u00f6netimde zorluklar yarat\u0131yor ve g\u00fcvenlik politikalar\u0131n\u0131n tutarl\u0131l\u0131\u011f\u0131n\u0131 sa\u011flamay\u0131 g\u00fc\u00e7le\u015ftiriyordu. \u015eirket, bu durumu \u00e7\u00f6zmek i\u00e7in AWS Security Groups’u kullanmaya karar verdi. Her sunucu t\u00fcr\u00fc i\u00e7in ayr\u0131 Security Group’lar tan\u0131mland\u0131. \u00d6rne\u011fin, veritaban\u0131 sunucusunun Security Group’u, sadece uygulama sunucusunun Security Group’undan gelen trafik i\u00e7in MySQL portuna (3306) eri\u015fime izin verecek \u015fekilde ayarland\u0131. Web sunucusunun Security Group’u ise sadece HTTP\/HTTPS trafi\u011fine izin verdi ve SSH eri\u015fimi sadece \u015firket VPN’inden gelen IP adresleriyle k\u0131s\u0131tland\u0131. Bu katmanl\u0131 bulut g\u00fcvenlik duvar\u0131 yakla\u015f\u0131m\u0131 sayesinde, \u015firket hem g\u00fcvenlik politikalar\u0131n\u0131 merkezi olarak y\u00f6netebildi hem de sunucular aras\u0131 ileti\u015fimi daha g\u00fcvenli hale getirerek, olas\u0131 bir ihlalin yay\u0131lmas\u0131n\u0131 engelledi. Bu, bulut g\u00fcvenlik duvarlar\u0131n\u0131n b\u00fcy\u00fck \u00f6l\u00e7ekli altyap\u0131larda ne kadar kritik bir rol oynad\u0131\u011f\u0131n\u0131 g\u00f6steren m\u00fckemmel bir \u00f6rnektir.\n <\/p>\n<h2>SSH G\u00fcvenli\u011fini \u0130leriye Ta\u015f\u0131mak \u0130\u00e7in Ek \u0130pu\u00e7lar\u0131 Nelerdir?<\/h2>\n<p>\n Fail2Ban, Nftables ve bulut g\u00fcvenlik duvarlar\u0131 g\u00fc\u00e7l\u00fc savunma mekanizmalar\u0131 sunsa da, SSH g\u00fcvenli\u011fini daha da sa\u011flamla\u015ft\u0131rmak i\u00e7in uygulanabilecek ba\u015fka \u00f6nemli y\u00f6ntemler de bulunmaktad\u0131r. Bu y\u00f6ntemler, sald\u0131r\u0131 y\u00fczeyini daralt\u0131r, kimlik do\u011frulama s\u00fcre\u00e7lerini g\u00fc\u00e7lendirir ve genel g\u00fcvenlik duru\u015funuzu iyile\u015ftirir. G\u00fcvenlik, tek bir arac\u0131n de\u011fil, bir dizi iyi uygulaman\u0131n birle\u015fimidir.\n <\/p>\n<h3>Anahtar Tabanl\u0131 Kimlik Do\u011frulama Neden Tercih Edilmelidir?<\/h3>\n<p>\n Parola tabanl\u0131 kimlik do\u011frulama, brute-force sald\u0131r\u0131lar\u0131na kar\u015f\u0131 her zaman risk ta\u015f\u0131r. Bu nedenle, SSH i\u00e7in anahtar tabanl\u0131 kimlik do\u011frulama kullanmak en g\u00fcvenli y\u00f6ntemlerden biridir. Anahtar tabanl\u0131 kimlik do\u011frulamada, bir genel\/\u00f6zel anahtar \u00e7ifti olu\u015fturulur. Genel anahtar sunucuya y\u00fcklenirken, \u00f6zel anahtar kullan\u0131c\u0131n\u0131n yerel makinesinde g\u00fcvenli bir \u015fekilde saklan\u0131r. Ba\u011flant\u0131 kuruldu\u011funda, sunucu \u00f6zel anahtar\u0131n\u0131zla bir \u015fifreleme meydan okumas\u0131 yapar ve bu, parolan\u0131z\u0131n asla a\u011f \u00fczerinden g\u00f6nderilmedi\u011fi anlam\u0131na gelir. Bu, hem g\u00fcvenlik seviyesini art\u0131r\u0131r hem de otomatik ba\u011flant\u0131lar\u0131 kolayla\u015ft\u0131r\u0131r. \u00d6zel anahtar\u0131n\u0131z\u0131 bir parola ile korumak (passphrase), ek bir g\u00fcvenlik katman\u0131 sa\u011flar.\n <\/p>\n<pre><code>\n# Anahtar \u00e7ifti olu\u015fturma\nssh-keygen -t rsa -b 4096\n\n# Genel anahtar\u0131 sunucuya kopyalama\nssh-copy-id kullanici_adi@sunucu_ip_adresi\n\n# Sunucu \u00fczerinde parola ile kimlik do\u011frulamay\u0131 devre d\u0131\u015f\u0131 b\u0131rakma (opsiyonel ama \u00f6nerilir)\n# \/etc\/ssh\/sshd_config dosyas\u0131nda:\n# PasswordAuthentication no\n# ChallengeResponseAuthentication no\n# UsePAM no\n# Ard\u0131ndan SSH hizmetini yeniden ba\u015flat\u0131n: sudo systemctl restart sshd\n <\/code><\/pre>\n<h3>Varsay\u0131lan SSH Portunu De\u011fi\u015ftirmek G\u00fcvenli\u011fi Nas\u0131l Etkiler?<\/h3>\n<p>\n SSH’in varsay\u0131lan portu 22’dir. Bu portun de\u011fi\u015ftirilmesi (\u00f6rne\u011fin 2222 veya ba\u015fka bir y\u00fcksek port numaras\u0131na), do\u011frudan bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 kapatmaz ancak “g\u00fcvenlik yoluyla belirsizlik” (security through obscurity) ilkesine dayanarak otomatik bot taramalar\u0131n\u0131 ve genel brute-force sald\u0131r\u0131lar\u0131n\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde azalt\u0131r. Sald\u0131rganlar genellikle varsay\u0131lan portlar\u0131 tarar; portu de\u011fi\u015ftirmek, sunucunuzun bu ilk taramalarda fark edilmemesini sa\u011flar. Ancak bu tek ba\u015f\u0131na yeterli bir \u00f6nlem de\u011fildir ve di\u011fer g\u00fcvenlik katmanlar\u0131yla birlikte kullan\u0131lmal\u0131d\u0131r.\n <\/p>\n<pre><code>\n# \/etc\/ssh\/sshd_config dosyas\u0131nda\n# Port 22 sat\u0131r\u0131n\u0131 bulup de\u011fi\u015ftirin veya yeni bir sat\u0131r ekleyin:\nPort 2222\n# Ard\u0131ndan SSH hizmetini yeniden ba\u015flat\u0131n: sudo systemctl restart sshd\n <\/code><\/pre>\n<h3>Root Eri\u015fimi ve Parola Politikalar\u0131 Hakk\u0131nda Ne Bilinmelidir?<\/h3>\n<p>\n Do\u011frudan root kullan\u0131c\u0131s\u0131yla SSH eri\u015fimine izin vermek, ciddi bir g\u00fcvenlik riski olu\u015fturur. Root kullan\u0131c\u0131s\u0131, sistem \u00fczerinde s\u0131n\u0131rs\u0131z yetkiye sahiptir ve bu hesab\u0131n ele ge\u00e7irilmesi, sunucunuzun tamamen kontrol alt\u0131na al\u0131nmas\u0131 anlam\u0131na gelir. Bunun yerine, normal bir kullan\u0131c\u0131 hesab\u0131 olu\u015fturulmal\u0131 ve <code>sudo<\/code> yetkisi verilmelidir. Root eri\u015fimi gerekti\u011finde bu kullan\u0131c\u0131 \u00fczerinden <code>sudo<\/code> komutuyla ger\u00e7ekle\u015ftirilmelidir.\n <\/p>\n<pre><code>\n# \/etc\/ssh\/sshd_config dosyas\u0131nda\nPermitRootLogin no\n# Ard\u0131ndan SSH hizmetini yeniden ba\u015flat\u0131n: sudo systemctl restart sshd\n <\/code><\/pre>\n<p>\n Ayr\u0131ca, kullan\u0131c\u0131lar\u0131n g\u00fc\u00e7l\u00fc ve benzersiz parolalar kullanmas\u0131n\u0131 zorunlu k\u0131lan parola politikalar\u0131 uygulamak da \u00e7ok \u00f6nemlidir. Parola karma\u015f\u0131kl\u0131\u011f\u0131, uzunlu\u011fu ve d\u00fczenli de\u011fi\u015ftirilmesi gibi kurallar, sistemin genel g\u00fcvenli\u011fini art\u0131r\u0131r.\n <\/p>\n<h3>G\u00fcnl\u00fck \u0130zleme ve Denetim Neden \u00d6nemlidir?<\/h3>\n<p>\n Sunucu g\u00fcnl\u00fcklerini (<code>\/var\/log\/auth.log<\/code>, <code>\/var\/log\/syslog<\/code> vb.) d\u00fczenli olarak izlemek, potansiyel g\u00fcvenlik ihlallerini veya anormal davran\u0131\u015flar\u0131 erken a\u015famada tespit etmek i\u00e7in kritik \u00f6neme sahiptir. Fail2Ban gibi ara\u00e7lar g\u00fcnl\u00fckleri otomatik olarak tarasa da, manuel incelemeler veya merkezi g\u00fcnl\u00fck y\u00f6netim sistemleri (ELK Stack, Splunk) kullanarak daha derinlemesine analizler yapmak, sald\u0131r\u0131lar\u0131 anlaman\u0131za ve gelecekteki savunmalar\u0131n\u0131z\u0131 g\u00fc\u00e7lendirmenize yard\u0131mc\u0131 olur.\n <\/p>\n<h3>\u00c7ift Fakt\u00f6rl\u00fc Kimlik Do\u011frulama (2FA) Nas\u0131l Entegre Edilir?<\/h3>\n<p>\n SSH i\u00e7in 2FA uygulamak, kimlik do\u011frulama s\u00fcrecine ek bir g\u00fcvenlik katman\u0131 ekler. Bu, parolan\u0131z\u0131n veya \u00f6zel anahtar\u0131n\u0131z\u0131n \u00e7al\u0131nmas\u0131 durumunda bile yetkisiz eri\u015fimi engeller. Google Authenticator gibi uygulamalarla entegrasyon sa\u011flayarak, SSH oturumu a\u00e7mak i\u00e7in hem parolan\u0131z\u0131\/anahtar\u0131n\u0131z\u0131 hem de mobil cihaz\u0131n\u0131zdaki tek kullan\u0131ml\u0131k kodu girmeniz gerekir. Bu, \u00f6zellikle y\u00fcksek g\u00fcvenlik gerektiren ortamlar i\u00e7in \u015fiddetle tavsiye edilen bir y\u00f6ntemdir.\n <\/p>\n<h2>Mobil Cihazlardan SSH Y\u00f6netimi \u0130\u00e7in Tasar\u0131m \u0130pu\u00e7lar\u0131 Nelerdir?<\/h2>\n<p>\n G\u00fcn\u00fcm\u00fczde sunucu y\u00f6netimi sadece masa\u00fcst\u00fc bilgisayarlarla s\u0131n\u0131rl\u0131 kalm\u0131yor; mobil cihazlar \u00fczerinden SSH eri\u015fimi ve y\u00f6netimi de giderek yayg\u0131nla\u015f\u0131yor. Ancak mobil aray\u00fczlerin k\u00fc\u00e7\u00fck ekran boyutlar\u0131, dokunmatik kontroller ve farkl\u0131 a\u011f ko\u015fullar\u0131 nedeniyle kendine \u00f6zg\u00fc zorluklar\u0131 vard\u0131r. Bu b\u00f6l\u00fcmde, mobil cihazlardan SSH y\u00f6netimi yaparken kullan\u0131c\u0131 deneyimini iyile\u015ftirecek ve responsive tasar\u0131m prensiplerini uygulayacak ipu\u00e7lar\u0131na de\u011finece\u011fiz.\n <\/p>\n<p>\n Mobil uyumlu bir SSH y\u00f6netim deneyimi sunmak i\u00e7in, \u00f6ncelikle kullan\u0131lan SSH istemcisinin kendisi \u00f6nemlidir. Termius, JuiceSSH, Prompt gibi mobil SSH uygulamalar\u0131, k\u00fc\u00e7\u00fck ekranlarda komut sat\u0131r\u0131 deneyimini optimize etmek i\u00e7in \u00f6zel olarak tasarlanm\u0131\u015ft\u0131r. Bu uygulamalar genellikle:\n <\/p>\n<ul>\n<li>\u00d6zelle\u015ftirilebilir klavye k\u0131sayollar\u0131 ve ek \u00f6zel tu\u015flar (Tab, Ctrl, Alt gibi) sunar.<\/li>\n<li>Birden fazla oturumu y\u00f6netme ve kolayca ge\u00e7i\u015f yapma imkan\u0131 sa\u011flar.<\/li>\n<li>Anahtar tabanl\u0131 kimlik do\u011frulama i\u00e7in anahtar depolama ve y\u00f6netim \u00f6zelliklerini i\u00e7erir.<\/li>\n<li>Kopyala\/yap\u0131\u015ft\u0131r i\u015flemlerini kolayla\u015ft\u0131r\u0131r.<\/li>\n<\/ul>\n<p>\n Ancak, SSH ile uzaktan y\u00f6netilen bir web aray\u00fcz\u00fc veya y\u00f6netim paneli geli\u015ftiriliyorsa, bu aray\u00fczlerin mobil uyumlu olmas\u0131 \u00e7ok daha kritik hale gelir. Responsive web tasar\u0131m\u0131 prensipleri, bu noktada devreye girer. Bir web aray\u00fcz\u00fc geli\u015ftirirken, CSS medya sorgular\u0131n\u0131 kullanarak farkl\u0131 ekran boyutlar\u0131na g\u00f6re d\u00fczenin otomatik olarak ayarlanmas\u0131n\u0131 sa\u011flamak esast\u0131r. \u00d6rne\u011fin, masa\u00fcst\u00fcnde yan yana duran men\u00fc \u00f6\u011feleri, mobil cihazlarda dikey olarak s\u0131ralanabilir veya bir “hamburger men\u00fc” alt\u0131na gizlenebilir.\n <\/p>\n<p>\n Bir web aray\u00fcz\u00fcnde medya sorgular\u0131n\u0131n mant\u0131\u011f\u0131n\u0131 a\u00e7\u0131klayan basit bir \u00f6rnek d\u00fc\u015f\u00fcnelim. \u00d6rne\u011fin, bir sunucu izleme panelinde, masa\u00fcst\u00fcnde geni\u015f bir tablo olarak g\u00f6sterilen sunucu listesi, mobil cihazlarda her sunucunun ayr\u0131 bir kart olarak g\u00f6sterildi\u011fi bir d\u00fczene ge\u00e7ebilir. Bu ge\u00e7i\u015f, CSS’deki <code>@media<\/code> kurallar\u0131 ile sa\u011flan\u0131r:\n <\/p>\n<pre><code>\n\/* Masa\u00fcst\u00fc i\u00e7in varsay\u0131lan stil *\/\n.server-list {\n display: table;\n width: 100%;\n}\n.server-item {\n display: table-row;\n}\n.server-item > div {\n display: table-cell;\n padding: 10px;\n border-bottom: 1px solid #eee;\n}\n\n\/* Mobil cihazlar i\u00e7in stil (maksimum geni\u015flik 768px) *\/\n@media (max-width: 768px) {\n .server-list {\n display: block; \/* Tablo yerine blok d\u00fczeni *\/\n }\n .server-item {\n display: block; \/* Sat\u0131r yerine blok d\u00fczeni *\/\n margin-bottom: 15px;\n border: 1px solid #ddd;\n border-radius: 5px;\n padding: 10px;\n }\n .server-item > div {\n display: block; \/* H\u00fccre yerine blok d\u00fczeni *\/\n border-bottom: none; \/* Mobil kartlarda alt \u00e7izgi olmas\u0131n *\/\n padding: 5px 0;\n }\n .server-item > div:first-child {\n font-weight: bold; \/* \u0130lk \u00f6\u011feyi (\u00f6rne\u011fin sunucu ad\u0131) kal\u0131n yap *\/\n }\n}\n <\/code><\/pre>\n<p>\n Yukar\u0131daki \u00f6rnek, sunucu listesinin mobil cihazlarda nas\u0131l daha okunabilir hale getirilebilece\u011fini g\u00f6stermektedir. Bu t\u00fcr medya sorgular\u0131, metin boyutlar\u0131n\u0131n ayarlanmas\u0131, d\u00fc\u011fme boyutlar\u0131n\u0131n parmakla dokunmaya uygun hale getirilmesi ve gereksiz \u00f6\u011felerin gizlenmesi gibi bir\u00e7ok farkl\u0131 optimizasyon i\u00e7in kullan\u0131labilir.\n <\/p>\n<p>\n Mobil cihazlardan SSH y\u00f6netimi i\u00e7in dikkate al\u0131nmas\u0131 gereken di\u011fer \u00f6nemli noktalar:\n <\/p>\n<ul>\n<li><strong>Minimalist Aray\u00fcz:<\/strong> Gereksiz g\u00f6rsel karma\u015fadan ka\u00e7\u0131n\u0131lmal\u0131, temel i\u015flevlere h\u0131zl\u0131 eri\u015fim sa\u011flanmal\u0131d\u0131r.<\/li>\n<li><strong>B\u00fcy\u00fck Dokunma Hedefleri:<\/strong> D\u00fc\u011fmeler ve etkile\u015fimli \u00f6\u011feler, parmakla kolayca dokunulabilecek b\u00fcy\u00fckl\u00fckte olmal\u0131d\u0131r.<\/li>\n<li><strong>D\u00fc\u015f\u00fck Bant Geni\u015fli\u011fi Optimizasyonu:<\/strong> Mobil a\u011flar her zaman h\u0131zl\u0131 olmayabilir. Bu nedenle, aray\u00fczlerin hafif ve h\u0131zl\u0131 y\u00fcklenir olmas\u0131 \u00f6nemlidir. Resimler optimize edilmeli, gereksiz betikler azalt\u0131lmal\u0131d\u0131r.<\/li>\n<li><strong>G\u00fcvenlik:<\/strong> Mobil cihazlarda hassas SSH anahtarlar\u0131n\u0131 saklarken ekstra \u00f6zen g\u00f6sterilmelidir. Cihaz kilidi, biyometrik kimlik do\u011frulama ve g\u00fcvenli depolama mekanizmalar\u0131 kullan\u0131lmal\u0131d\u0131r.<\/li>\n<li><strong>Offline Eri\u015fim:<\/strong> Baz\u0131 y\u00f6netim ara\u00e7lar\u0131, internet ba\u011flant\u0131s\u0131 olmad\u0131\u011f\u0131nda bile \u00f6nbelle\u011fe al\u0131nm\u0131\u015f verilere eri\u015fim sa\u011flayabilmelidir.<\/li>\n<\/ul>\n<p>\n Sonu\u00e7 olarak, mobil cihazlardan SSH y\u00f6netimi, do\u011fru ara\u00e7lar ve responsive tasar\u0131m prensipleriyle olduk\u00e7a verimli hale getirilebilir. Bu, \u00f6zellikle acil durum m\u00fcdahalelerinde veya hareket halindeyken sunucular\u0131 y\u00f6netme ihtiyac\u0131 duyan sistem y\u00f6neticileri i\u00e7in b\u00fcy\u00fck kolayl\u0131k sa\u011flar.\n <\/p>\n<h2>Sonu\u00e7: Katmanl\u0131 G\u00fcvenlik Yakla\u015f\u0131m\u0131 Neden Vazge\u00e7ilmezdir?<\/h2>\n<p>\n SSH g\u00fcvenli\u011fini sa\u011flamla\u015ft\u0131rmak, tek bir \u00e7\u00f6z\u00fcmle de\u011fil, birbiriyle entegre \u00e7al\u0131\u015fan birden fazla g\u00fcvenlik katman\u0131yla m\u00fcmk\u00fcn olan s\u00fcrekli bir s\u00fcre\u00e7tir. Bu makalede ele ald\u0131\u011f\u0131m\u0131z Fail2Ban, Nftables ve bulut g\u00fcvenlik duvarlar\u0131, bu katmanl\u0131 savunma stratejisinin temel direklerini olu\u015fturur. Fail2Ban, g\u00fcnl\u00fck tabanl\u0131 analizle otomatik brute-force sald\u0131r\u0131lar\u0131n\u0131 engellerken, Nftables sunucu i\u015fletim sistemi seviyesinde detayl\u0131 paket filtrelemesi sa\u011flar. Bulut g\u00fcvenlik duvarlar\u0131 ise a\u011f katman\u0131nda, sunucular\u0131n\u0131za ula\u015fmadan \u00f6nce trafi\u011fi kontrol ederek ilk savunma hatt\u0131n\u0131 olu\u015fturur. Bu \u00fc\u00e7l\u00fcy\u00fc, anahtar tabanl\u0131 kimlik do\u011frulama, SSH portunu de\u011fi\u015ftirme, root eri\u015fimini k\u0131s\u0131tlama ve \u00e7ift fakt\u00f6rl\u00fc kimlik do\u011frulama gibi ileri d\u00fczey uygulamalarla birle\u015ftirmek, sunucular\u0131n\u0131z\u0131n g\u00fcvenlik duru\u015funu \u00f6nemli \u00f6l\u00e7\u00fcde g\u00fc\u00e7lendirir.\n <\/p>\n<p>\n Her bir g\u00fcvenlik katman\u0131, farkl\u0131 bir tehdit vekt\u00f6r\u00fcn\u00fc hedef al\u0131r ve birbirini tamamlar. Bir katman\u0131n atlat\u0131lmas\u0131 durumunda di\u011fer katmanlar devreye girerek sistemi korumaya devam eder. Bu “derinlemesine savunma” (defense-in-depth) stratejisi, modern siber g\u00fcvenlik tehditlerine kar\u015f\u0131 en etkili yakla\u015f\u0131md\u0131r. Unutulmamal\u0131d\u0131r ki, siber tehditler s\u00fcrekli evrim ge\u00e7irdi\u011fi i\u00e7in g\u00fcvenlik politikalar\u0131 ve uygulamalar\u0131 da d\u00fczenli olarak g\u00f6zden ge\u00e7irilmeli ve g\u00fcncellenmelidir. Sunucu g\u00fcnl\u00fcklerinin d\u00fczenli olarak izlenmesi ve g\u00fcvenlik yamalar\u0131n\u0131n zaman\u0131nda uygulanmas\u0131, bu dinamik s\u00fcrecin ayr\u0131lmaz par\u00e7alar\u0131d\u0131r. G\u00fcvenli bir SSH yap\u0131land\u0131rmas\u0131, sadece yetkisiz eri\u015fimi engellemekle kalmaz, ayn\u0131 zamanda sistem kaynaklar\u0131n\u0131n verimli kullan\u0131lmas\u0131n\u0131 sa\u011flar ve i\u015f s\u00fcreklili\u011fini temin eder.\n <\/p>\n<h3>S\u0131k\u00e7a Sorulan Sorular<\/h3>\n<ul>\n<li>\n <strong>Fail2Ban, Nftables veya bulut g\u00fcvenlik duvarlar\u0131ndan hangisi en \u00f6nemlisidir?<\/strong><\/p>\n<p>Hepsi \u00f6nemlidir ve birbirini tamamlar. En iyi g\u00fcvenlik, bu ara\u00e7lar\u0131n bir arada, katmanl\u0131 bir yakla\u015f\u0131mla kullan\u0131lmas\u0131yla sa\u011flan\u0131r. Bulut g\u00fcvenlik duvarlar\u0131 ilk engellemeyi yaparken, Nftables sunucu seviyesinde detayl\u0131 kontrol sa\u011flar, Fail2Ban ise otomatik sald\u0131r\u0131lar\u0131 dinamik olarak engeller.<\/p>\n<\/li>\n<li>\n <strong>SSH portunu de\u011fi\u015ftirmek ger\u00e7ekten g\u00fcvenli\u011fi art\u0131r\u0131r m\u0131?<\/strong><\/p>\n<p>Do\u011frudan bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 kapatmaz ancak otomatik bot taramalar\u0131n\u0131 ve genel brute-force sald\u0131r\u0131lar\u0131n\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde azalt\u0131r. Sald\u0131rganlar\u0131n hedef listelerinden \u00e7\u0131kman\u0131za yard\u0131mc\u0131 olur, ancak tek ba\u015f\u0131na yeterli bir \u00f6nlem de\u011fildir ve di\u011fer g\u00fcvenlik \u00f6nlemleriyle birlikte kullan\u0131lmal\u0131d\u0131r.<\/p>\n<\/li>\n<li>\n <strong>Anahtar tabanl\u0131 kimlik do\u011frulama kullan\u0131rken parolaya hala ihtiyac\u0131m var m\u0131?<\/strong><\/p>\n<p>Evet, \u00f6zel anahtar\u0131n\u0131z\u0131 bir parola (passphrase) ile koruman\u0131z \u015fiddetle tavsiye edilir. Bu, \u00f6zel anahtar\u0131n\u0131z\u0131n \u00e7al\u0131nmas\u0131 durumunda bile yetkisiz eri\u015fimi engellemeye yard\u0131mc\u0131 olan ek bir g\u00fcvenlik katman\u0131d\u0131r. Sunucu taraf\u0131nda ise parola ile kimlik do\u011frulamay\u0131 devre d\u0131\u015f\u0131 b\u0131rakman\u0131z \u00f6nerilir.<\/p>\n<\/li>\n<li>\n <strong>Fail2Ban’\u0131n performans \u00fczerindeki etkisi nedir?<\/strong><\/p>\n<p>Fail2Ban, g\u00fcnl\u00fck dosyalar\u0131n\u0131 tarad\u0131\u011f\u0131 i\u00e7in \u00e7ok d\u00fc\u015f\u00fck bir performans etkisi vard\u0131r. Yo\u011fun sald\u0131r\u0131 alt\u0131ndaki sunucularda, engelleme yaparak asl\u0131nda sistem kaynaklar\u0131n\u0131n gereksiz yere t\u00fcketilmesini engelledi\u011fi i\u00e7in performans\u0131 olumlu y\u00f6nde etkileyebilir.<\/p>\n<\/li>\n<li>\n <strong>Bulut g\u00fcvenlik duvarlar\u0131 ile Nftables aras\u0131nda bir \u00e7ak\u0131\u015fma olabilir mi?<\/strong><\/p>\n<p>Genellikle bir \u00e7ak\u0131\u015fma olmaz, aksine birbirlerini tamamlarlar. Bulut g\u00fcvenlik duvarlar\u0131, trafi\u011fi VPC seviyesinde filtrelerken, Nftables sunucunun kendi i\u00e7inde daha gran\u00fcler kurallar uygulaman\u0131za olanak tan\u0131r. \u00d6nce bulut g\u00fcvenlik duvarlar\u0131 trafi\u011fi s\u00fczer, sonra sunucuya ula\u015fan trafik Nftables taraf\u0131ndan tekrar de\u011ferlendirilir. Bu, katmanl\u0131 g\u00fcvenli\u011fin bir \u00f6rne\u011fidir.<\/p>\n<\/li>\n<\/ul>\n<p><\/body><\/p>\n","protected":false},"excerpt":{"rendered":"SSH G\u00fcvenli\u011fini Sa\u011flamla\u015ft\u0131rma: Fail2Ban, Nftables ve Bulut G\u00fcvenlik Duvarlar\u0131 Sunucu g\u00fcvenli\u011fi, dijital d\u00fcnyan\u0131n temel ta\u015flar\u0131ndan biridir ve bu…","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-40149","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-genel","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\n<title>SSH G\u00fcvenli\u011fi Neden Bu Kadar \u00d6nemli ve Kar\u015f\u0131la\u015f\u0131lan Riskler Nelerdir?<\/title>\n<meta name=\"description\" content=\"Sunucu g\u00fcvenli\u011fi, dijital d\u00fcnyan\u0131n temel ta\u015flar\u0131ndan biridir ve bu g\u00fcvenli\u011fin kilit noktalar\u0131ndan biri de SSH (Secure Shell) eri\u015fimidir. Peki, sunucular\u0131n\u0131z\u0131 s\u00fcrekli tehdit eden siber sald\u0131r\u0131lara kar\u015f\u0131 SSH ba\u011flant\u0131lar\u0131n\u0131z\u0131 nas\u0131l \u00e7elik gibi sa\u011flam hale getirebilirsiniz? Bu makale, sunucular\u0131n\u0131z\u0131 yetkisiz eri\u015fimlerden korumak i\u00e7in Fail2Ban, Nftables ve bulut g\u00fcvenlik duvarlar\u0131 gibi g\u00fc\u00e7l\u00fc ara\u00e7lar\u0131 nas\u0131l kullanaca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m a\u00e7\u0131klayarak, sistemlerinizi siber tehditlere kar\u015f\u0131 daha diren\u00e7li hale getirme yollar\u0131n\u0131 sunuyor.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SSH G\u00fcvenli\u011fi Neden Bu Kadar \u00d6nemli ve Kar\u015f\u0131la\u015f\u0131lan Riskler Nelerdir?\" \/>\n<meta property=\"og:description\" content=\"Sunucu g\u00fcvenli\u011fi, dijital d\u00fcnyan\u0131n temel ta\u015flar\u0131ndan biridir ve bu g\u00fcvenli\u011fin kilit noktalar\u0131ndan biri de SSH (Secure Shell) eri\u015fimidir. Peki, sunucular\u0131n\u0131z\u0131 s\u00fcrekli tehdit eden siber sald\u0131r\u0131lara kar\u015f\u0131 SSH ba\u011flant\u0131lar\u0131n\u0131z\u0131 nas\u0131l \u00e7elik gibi sa\u011flam hale getirebilirsiniz? Bu makale, sunucular\u0131n\u0131z\u0131 yetkisiz eri\u015fimlerden korumak i\u00e7in Fail2Ban, Nftables ve bulut g\u00fcvenlik duvarlar\u0131 gibi g\u00fc\u00e7l\u00fc ara\u00e7lar\u0131 nas\u0131l kullanaca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m a\u00e7\u0131klayarak, sistemlerinizi siber tehditlere kar\u015f\u0131 daha diren\u00e7li hale getirme yollar\u0131n\u0131 sunuyor.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-24T17:25:13+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"25 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"SSH G\u00fcvenli\u011fi Neden Bu Kadar \u00d6nemli ve Kar\u015f\u0131la\u015f\u0131lan Riskler Nelerdir?\",\"datePublished\":\"2026-02-24T17:25:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/\"},\"wordCount\":4411,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/\",\"name\":\"SSH G\u00fcvenli\u011fi Neden Bu Kadar \u00d6nemli ve Kar\u015f\u0131la\u015f\u0131lan Riskler Nelerdir?\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-02-24T17:25:13+00:00\",\"description\":\"Sunucu g\u00fcvenli\u011fi, dijital d\u00fcnyan\u0131n temel ta\u015flar\u0131ndan biridir ve bu g\u00fcvenli\u011fin kilit noktalar\u0131ndan biri de SSH (Secure Shell) eri\u015fimidir. Peki, sunucular\u0131n\u0131z\u0131 s\u00fcrekli tehdit eden siber sald\u0131r\u0131lara kar\u015f\u0131 SSH ba\u011flant\u0131lar\u0131n\u0131z\u0131 nas\u0131l \u00e7elik gibi sa\u011flam hale getirebilirsiniz? Bu makale, sunucular\u0131n\u0131z\u0131 yetkisiz eri\u015fimlerden korumak i\u00e7in Fail2Ban, Nftables ve bulut g\u00fcvenlik duvarlar\u0131 gibi g\u00fc\u00e7l\u00fc ara\u00e7lar\u0131 nas\u0131l kullanaca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m a\u00e7\u0131klayarak, sistemlerinizi siber tehditlere kar\u015f\u0131 daha diren\u00e7li hale getirme yollar\u0131n\u0131 sunuyor.\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SSH G\u00fcvenli\u011fi Neden Bu Kadar \u00d6nemli ve Kar\u015f\u0131la\u015f\u0131lan Riskler Nelerdir?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n","yoast_head_json":{"title":"SSH G\u00fcvenli\u011fi Neden Bu Kadar \u00d6nemli ve Kar\u015f\u0131la\u015f\u0131lan Riskler Nelerdir?","description":"Sunucu g\u00fcvenli\u011fi, dijital d\u00fcnyan\u0131n temel ta\u015flar\u0131ndan biridir ve bu g\u00fcvenli\u011fin kilit noktalar\u0131ndan biri de SSH (Secure Shell) eri\u015fimidir. Peki, sunucular\u0131n\u0131z\u0131 s\u00fcrekli tehdit eden siber sald\u0131r\u0131lara kar\u015f\u0131 SSH ba\u011flant\u0131lar\u0131n\u0131z\u0131 nas\u0131l \u00e7elik gibi sa\u011flam hale getirebilirsiniz? Bu makale, sunucular\u0131n\u0131z\u0131 yetkisiz eri\u015fimlerden korumak i\u00e7in Fail2Ban, Nftables ve bulut g\u00fcvenlik duvarlar\u0131 gibi g\u00fc\u00e7l\u00fc ara\u00e7lar\u0131 nas\u0131l kullanaca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m a\u00e7\u0131klayarak, sistemlerinizi siber tehditlere kar\u015f\u0131 daha diren\u00e7li hale getirme yollar\u0131n\u0131 sunuyor.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/","og_locale":"tr_TR","og_type":"article","og_title":"SSH G\u00fcvenli\u011fi Neden Bu Kadar \u00d6nemli ve Kar\u015f\u0131la\u015f\u0131lan Riskler Nelerdir?","og_description":"Sunucu g\u00fcvenli\u011fi, dijital d\u00fcnyan\u0131n temel ta\u015flar\u0131ndan biridir ve bu g\u00fcvenli\u011fin kilit noktalar\u0131ndan biri de SSH (Secure Shell) eri\u015fimidir. Peki, sunucular\u0131n\u0131z\u0131 s\u00fcrekli tehdit eden siber sald\u0131r\u0131lara kar\u015f\u0131 SSH ba\u011flant\u0131lar\u0131n\u0131z\u0131 nas\u0131l \u00e7elik gibi sa\u011flam hale getirebilirsiniz? Bu makale, sunucular\u0131n\u0131z\u0131 yetkisiz eri\u015fimlerden korumak i\u00e7in Fail2Ban, Nftables ve bulut g\u00fcvenlik duvarlar\u0131 gibi g\u00fc\u00e7l\u00fc ara\u00e7lar\u0131 nas\u0131l kullanaca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m a\u00e7\u0131klayarak, sistemlerinizi siber tehditlere kar\u015f\u0131 daha diren\u00e7li hale getirme yollar\u0131n\u0131 sunuyor.","og_url":"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-02-24T17:25:13+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"25 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"SSH G\u00fcvenli\u011fi Neden Bu Kadar \u00d6nemli ve Kar\u015f\u0131la\u015f\u0131lan Riskler Nelerdir?","datePublished":"2026-02-24T17:25:13+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/"},"wordCount":4411,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/","url":"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/","name":"SSH G\u00fcvenli\u011fi Neden Bu Kadar \u00d6nemli ve Kar\u015f\u0131la\u015f\u0131lan Riskler Nelerdir?","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-02-24T17:25:13+00:00","description":"Sunucu g\u00fcvenli\u011fi, dijital d\u00fcnyan\u0131n temel ta\u015flar\u0131ndan biridir ve bu g\u00fcvenli\u011fin kilit noktalar\u0131ndan biri de SSH (Secure Shell) eri\u015fimidir. Peki, sunucular\u0131n\u0131z\u0131 s\u00fcrekli tehdit eden siber sald\u0131r\u0131lara kar\u015f\u0131 SSH ba\u011flant\u0131lar\u0131n\u0131z\u0131 nas\u0131l \u00e7elik gibi sa\u011flam hale getirebilirsiniz? Bu makale, sunucular\u0131n\u0131z\u0131 yetkisiz eri\u015fimlerden korumak i\u00e7in Fail2Ban, Nftables ve bulut g\u00fcvenlik duvarlar\u0131 gibi g\u00fc\u00e7l\u00fc ara\u00e7lar\u0131 nas\u0131l kullanaca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m a\u00e7\u0131klayarak, sistemlerinizi siber tehditlere kar\u015f\u0131 daha diren\u00e7li hale getirme yollar\u0131n\u0131 sunuyor.","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"SSH G\u00fcvenli\u011fi Neden Bu Kadar \u00d6nemli ve Kar\u015f\u0131la\u015f\u0131lan Riskler Nelerdir?"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/40149","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=40149"}],"version-history":[{"count":0,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/40149\/revisions"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=40149"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=40149"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=40149"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":40149,"date":"2026-02-24T20:25:13","date_gmt":"2026-02-24T17:25:13","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/"},"modified":"2026-02-24T20:25:13","modified_gmt":"2026-02-24T17:25:13","slug":"ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/ssh-guvenligi-neden-bu-kadar-onemli-ve-karsilasilan-riskler-nelerdir\/","title":{"rendered":"SSH G\u00fcvenli\u011fi Neden Bu Kadar \u00d6nemli ve Kar\u015f\u0131la\u015f\u0131lan Riskler Nelerdir?"},"content":{"rendered":"