{"id":43514,"date":"2026-07-22T08:00:52","date_gmt":"2026-07-22T05:00:52","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=43514"},"modified":"2026-07-22T08:00:52","modified_gmt":"2026-07-22T05:00:52","slug":"firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/","title":{"rendered":"firewalld ile Rocky Linux 9’da G\u00fcvenlik Duvar\u0131 Kurulumu"},"content":{"rendered":"

firewalld ile Rocky Linux 9’da G\u00fcvenlik Duvar\u0131 Kurulumu<\/h2>\n

Rocky Linux 9, sunucu ve i\u015f istasyonlar\u0131 i\u00e7in sa\u011flam ve g\u00fcvenli bir i\u015fletim sistemidir. Bu g\u00fcvenli\u011fi sa\u011flaman\u0131n temel ta\u015flar\u0131ndan biri de etkili bir g\u00fcvenlik duvar\u0131d\u0131r. Rocky Linux 9’da varsay\u0131lan olarak gelen ve dinamik a\u011f yap\u0131land\u0131rmalar\u0131n\u0131 destekleyen g\u00fc\u00e7l\u00fc bir g\u00fcvenlik duvar\u0131 \u00e7\u00f6z\u00fcm\u00fc olan firewalld<\/code>, bu g\u00f6revi \u00fcstlenir. Bu makalede, firewalld<\/code>‘\u0131 kullanarak Rocky Linux 9 sisteminizde nas\u0131l g\u00fcvenli bir g\u00fcvenlik duvar\u0131 kuraca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m ele alaca\u011f\u0131z.<\/p>\n

firewalld Nedir ve Neden Kullanmal\u0131s\u0131n\u0131z?<\/h3>\n

firewalld<\/code>, Linux sistemlerinde a\u011f trafi\u011fini y\u00f6netmek i\u00e7in kullan\u0131lan, varsay\u0131lan olarak gelen ve \u00e7al\u0131\u015f\u0131rken yap\u0131land\u0131rma de\u011fi\u015fikliklerini uygulayabilen bir g\u00fcvenlik duvar\u0131 y\u00f6netim arac\u0131d\u0131r. Geleneksel g\u00fcvenlik duvar\u0131 \u00e7\u00f6z\u00fcmlerinden farkl\u0131 olarak, firewalld<\/code> “b\u00f6lgeler” (zones) konseptini kullan\u0131r. Bu b\u00f6lgeler, farkl\u0131 g\u00fcven derecelerine sahip a\u011f aray\u00fczlerini ve kaynaklar\u0131n\u0131 grupland\u0131rman\u0131za olanak tan\u0131r. \u00d6rne\u011fin, bir b\u00f6lgeyi “g\u00fcvenilir” olarak i\u015faretleyebilir ve di\u011ferini “riskli” olarak tan\u0131mlayabilirsiniz.<\/p>\n

firewalld<\/code> kullanman\u0131n ba\u015fl\u0131ca avantajlar\u0131 \u015funlard\u0131r:<\/p>\n

* Dinamik Yap\u0131land\u0131rma:<\/strong> G\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 sisteminizi yeniden ba\u015flatmadan veya servisleri durdurup ba\u015flatmadan an\u0131nda uygulayabilirsiniz. Bu, \u00f6zellikle \u00fcretim ortamlar\u0131nda kesintiyi en aza indirmek i\u00e7in kritiktir.
\n* B\u00f6lgeler (Zones):<\/strong> Farkl\u0131 a\u011f ba\u011flant\u0131lar\u0131n\u0131 (\u00f6rne\u011fin, yerel a\u011f, halka a\u00e7\u0131k Wi-Fi, VPN) farkl\u0131 g\u00fcvenlik seviyeleriyle y\u00f6netmenizi sa\u011flar.
\n* Servis Tabanl\u0131 Kurallar:<\/strong> Port numaralar\u0131 yerine servis adlar\u0131n\u0131 (\u00f6rne\u011fin, ssh<\/code>, http<\/code>, https<\/code>) kullanarak kurallar olu\u015fturmay\u0131 kolayla\u015ft\u0131r\u0131r.
\n* Kolay Kullan\u0131m:<\/strong> firewall-cmd<\/code> komut sat\u0131r\u0131 arac\u0131 ve firewall-config<\/code> grafik aray\u00fcz\u00fc ile kullan\u0131m\u0131 olduk\u00e7a basittir.
\n* Entegrasyon:<\/strong> SELinux gibi di\u011fer g\u00fcvenlik mekanizmalar\u0131yla iyi entegre olur.<\/p>\n

firewalld Kurulumu ve Temel Kavramlar<\/h3>\n

Rocky Linux 9’da firewalld<\/code> genellikle varsay\u0131lan olarak kurulu gelir. Ancak, emin olmak veya yeniden y\u00fcklemek isterseniz a\u015fa\u011f\u0131daki komutu kullanabilirsiniz:<\/p>\n

sudo dnf install firewalld<\/code><\/pre>\n
Kurulumdan sonra firewalld<\/code> hizmetini ba\u015flatman\u0131z ve sistem ba\u015flang\u0131c\u0131nda otomatik olarak \u00e7al\u0131\u015facak \u015fekilde ayarlaman\u0131z gerekir:<\/p>\n
sudo systemctl start firewalld\nsudo systemctl enable firewalld<\/code><\/pre>\n
Hizmetin durumunu kontrol etmek i\u00e7in:<\/p>\n
sudo systemctl status firewalld<\/code><\/pre>\n
\u00c7\u0131kt\u0131da active (running)<\/code> ifadesini g\u00f6rmelisiniz.<\/p>\n
B\u00f6lgeler (Zones)<\/h4>\n
firewalld<\/code>‘\u0131n temelini b\u00f6lgeler olu\u015fturur. Her a\u011f aray\u00fcz\u00fc bir b\u00f6lgeye atan\u0131r. firewalld<\/code> bu b\u00f6lgelere g\u00f6re hangi trafi\u011fe izin verilece\u011fini veya reddedilece\u011fini belirler. Rocky Linux 9’da baz\u0131 varsay\u0131lan b\u00f6lgeler bulunur:<\/p>\n
*   public<\/code><\/strong>: Genel a\u011flar i\u00e7in kullan\u0131l\u0131r. Varsay\u0131lan b\u00f6lgedir.
\n*   trusted<\/code><\/strong>: G\u00fcvenilir olarak kabul edilen t\u00fcm trafi\u011fe izin verir.
\n*   home<\/code><\/strong>: Ev a\u011f\u0131 gibi daha g\u00fcvenilir a\u011flar i\u00e7in.
\n*   internal<\/code><\/strong>: \u0130\u00e7 a\u011flar i\u00e7in.
\n*   external<\/code><\/strong>: D\u0131\u015f a\u011flara maruz kalan sunucular i\u00e7in. NAT (Network Address Translation) gibi \u00f6zellikler i\u00e7in kullan\u0131l\u0131r.
\n*   dmz<\/code><\/strong>: Demilitarize Zone (DMZ) i\u00e7in, d\u0131\u015far\u0131dan eri\u015filebilir ancak i\u00e7 a\u011fdan izole edilmi\u015f servisler i\u00e7in.
\n*   work<\/code><\/strong>: \u0130\u015f a\u011f\u0131 i\u00e7in.
\n*   drop<\/code><\/strong>: Gelen t\u00fcm paketleri sessizce d\u00fc\u015f\u00fcr\u00fcr (hi\u00e7bir yan\u0131t vermez).
\n*   block<\/code><\/strong>: Gelen t\u00fcm paketleri reddeder ve bir hata mesaj\u0131 g\u00f6nderir (ICMP destination unreachable<\/code> gibi).<\/p>\n
Servisler<\/h4>\n
firewalld<\/code>, yayg\u0131n olarak kullan\u0131lan servisler i\u00e7in \u00f6nceden tan\u0131mlanm\u0131\u015f kurallar i\u00e7erir. Bu, port numaralar\u0131n\u0131 ezberlemek yerine servis adlar\u0131n\u0131 kullanarak kurallar\u0131 daha okunabilir hale getirir. \u00d6rne\u011fin, SSH servisi varsay\u0131lan olarak 22 numaral\u0131 TCP portunu kullan\u0131r. firewalld<\/code>‘da bu servis ssh<\/code> olarak adland\u0131r\u0131l\u0131r.<\/p>\n
\u00c7al\u0131\u015fma Modlar\u0131: Runtime vs. Permanent<\/h4>\n
firewalld<\/code>‘da iki t\u00fcr yap\u0131land\u0131rma modu vard\u0131r:<\/p>\n
1.  Runtime (\u00c7al\u0131\u015fma Zaman\u0131):<\/strong> Bu modda yap\u0131lan de\u011fi\u015fiklikler hemen ge\u00e7erli olur ancak sistem yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda kaybolur. H\u0131zl\u0131 testler veya ge\u00e7ici ayarlamalar i\u00e7in kullan\u0131\u015fl\u0131d\u0131r.
\n2.  Permanent (Kal\u0131c\u0131):<\/strong> Bu modda yap\u0131lan de\u011fi\u015fiklikler kal\u0131c\u0131d\u0131r ve sistem yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda da korunur. Kal\u0131c\u0131 kurallar\u0131 etkinle\u015ftirmek i\u00e7in genellikle firewall-cmd --reload<\/code> komutu gereklidir.<\/p>\n
Varsay\u0131lan olarak firewall-cmd<\/code> komutlar\u0131 runtime modunda \u00e7al\u0131\u015f\u0131r. Kal\u0131c\u0131 de\u011fi\u015fiklikler yapmak i\u00e7in --permanent<\/code> se\u00e7ene\u011fini kullanman\u0131z gerekir.<\/p>\n
Temel firewalld Komutlar\u0131 ve Yap\u0131land\u0131rmalar<\/h3>\n
firewall-cmd<\/code> komutu, firewalld<\/code>‘\u0131 y\u00f6netmek i\u00e7in kullan\u0131lan ana ara\u00e7t\u0131r.<\/p>\n
Mevcut Durumu Kontrol Etme<\/h4>\n
G\u00fcvenlik duvar\u0131n\u0131n etkin olup olmad\u0131\u011f\u0131n\u0131 ve hangi b\u00f6lgenin varsay\u0131lan oldu\u011funu g\u00f6rmek i\u00e7in:<\/p>\n
sudo firewall-cmd --state\nsudo firewall-cmd --get-default-zone<\/code><\/pre>\n
B\u00f6lgeleri Y\u00f6netme<\/h4>\n
Hangi a\u011f aray\u00fczlerinin hangi b\u00f6lgelere atand\u0131\u011f\u0131n\u0131 g\u00f6rmek i\u00e7in:<\/p>\n
sudo firewall-cmd --get-active-zones<\/code><\/pre>\n
E\u011fer eth0<\/code> aray\u00fcz\u00fcn\u00fc public<\/code> b\u00f6lgesinden internal<\/code> b\u00f6lgesine ta\u015f\u0131mak isterseniz (bu i\u015flem genellikle otomatik olarak aray\u00fcz\u00fcn IP adresine g\u00f6re yap\u0131l\u0131r, ancak manuel olarak da atanabilir):<\/p>\n
# \u00d6nce mevcut atamay\u0131 kald\u0131r\nsudo firewall-cmd --zone=public --remove-interface=eth0 --permanent\n
Sonra yeni b\u00f6lgeye ata<\/h2>\nsudo firewall-cmd --zone=internal --add-interface=eth0 --permanent\n
De\u011fi\u015fiklikleri uygula<\/h2>\nsudo firewall-cmd --reload<\/code><\/pre>\n
Varsay\u0131lan b\u00f6lgeyi de\u011fi\u015ftirmek i\u00e7in:<\/p>\n
sudo firewall-cmd --set-default-zone=internal<\/code><\/pre>\n
Servisleri Y\u00f6netme<\/h4>\n
Mevcut t\u00fcm servisleri listelemek i\u00e7in:<\/p>\n
sudo firewall-cmd --get-services<\/code><\/pre>\n
Belirli bir b\u00f6lgede hangi servislerin etkin oldu\u011funu g\u00f6rmek i\u00e7in:<\/p>\n
sudo firewall-cmd --zone=public --list-services<\/code><\/pre>\n
Bir b\u00f6lgeye servis eklemek (\u00f6rne\u011fin, public<\/code> b\u00f6lgesine SSH eri\u015fimi eklemek):<\/p>\n
sudo firewall-cmd --zone=public --add-service=ssh --permanent\nsudo firewall-cmd --reload<\/code><\/pre>\n
Bir b\u00f6lgeden servis kald\u0131rmak:<\/p>\n
sudo firewall-cmd --zone=public --remove-service=ssh --permanent\nsudo firewall-cmd --reload<\/code><\/pre>\n
Portlar\u0131 Y\u00f6netme<\/h4>\n
Servisler yerine do\u011frudan port numaralar\u0131n\u0131 da ekleyebilirsiniz. \u00d6rne\u011fin, public<\/code> b\u00f6lgesine TCP port 8080’i a\u00e7mak i\u00e7in:<\/p>\n
sudo firewall-cmd --zone=public --add-port=8080\/tcp --permanent\nsudo firewall-cmd --reload<\/code><\/pre>\n
Belirli bir port aral\u0131\u011f\u0131n\u0131 a\u00e7mak i\u00e7in:<\/p>\n
sudo firewall-cmd --zone=public --add-port=8000-8010\/udp --permanent\nsudo firewall-cmd --reload<\/code><\/pre>\n
Port kald\u0131rmak i\u00e7in --remove-port<\/code> se\u00e7ene\u011fini kullan\u0131n.<\/p>\n
Kurallar\u0131 Listeleme<\/h4>\n
Mevcut t\u00fcm kurallar\u0131 (servisler ve portlar dahil) public<\/code> b\u00f6lgesinde g\u00f6rmek i\u00e7in:<\/p>\n
sudo firewall-cmd --zone=public --list-all<\/code><\/pre>\n
T\u00fcm b\u00f6lgelerdeki kurallar\u0131 g\u00f6rmek i\u00e7in:<\/p>\n
sudo firewall-cmd --list-all-zones<\/code><\/pre>\n
Rocky Linux 9’da G\u00fcvenlik Duvar\u0131 Kurulumu \u0130\u00e7in Ad\u0131m Ad\u0131m K\u0131lavuz<\/h3>\n
\u015eimdi, Rocky Linux 9’da yayg\u0131n senaryolar i\u00e7in firewalld<\/code>‘\u0131 nas\u0131l yap\u0131land\u0131raca\u011f\u0131n\u0131za dair ad\u0131m ad\u0131m bir k\u0131lavuz sunal\u0131m.<\/p>\n
Senaryo 1: Temel G\u00fcvenlik – Sadece SSH Eri\u015fimi<\/h4>\n
Bir sunucunun sadece SSH \u00fczerinden eri\u015filebilir olmas\u0131n\u0131 istiyorsan\u0131z, public<\/code> b\u00f6lgesinde sadece SSH servisine izin verebilirsiniz.<\/p>\n
1.  firewalld<\/code>‘\u0131n \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olun:<\/strong><\/p>\n
sudo systemctl status firewalld<\/code><\/pre>\n
    E\u011fer \u00e7al\u0131\u015fm\u0131yorsa ba\u015flat\u0131n ve etkinle\u015ftirin.<\/p>\n
2.  Varsay\u0131lan b\u00f6lgeyi kontrol edin:<\/strong><\/p>\n
sudo firewall-cmd --get-default-zone<\/code><\/pre>\n
    Genellikle public<\/code> olacakt\u0131r.<\/p>\n
3.  public<\/code> b\u00f6lgesindeki mevcut servisleri listeleyin:<\/strong><\/p>\n
sudo firewall-cmd --zone=public --list-services<\/code><\/pre>\n
    E\u011fer ssh<\/code> listede yoksa eklemeniz gerekecektir.<\/p>\n
4.  public<\/code> b\u00f6lgesine ssh<\/code> servisini ekleyin ve kal\u0131c\u0131 hale getirin:<\/strong><\/p>\n
sudo firewall-cmd --zone=public --add-service=ssh --permanent<\/code><\/pre>\n
5.  Yap\u0131land\u0131rmay\u0131 yeniden y\u00fckleyin:<\/strong><\/p>\n
sudo firewall-cmd --reload<\/code><\/pre>\n
6.  Kurallar\u0131 do\u011frulay\u0131n:<\/strong><\/p>\n
sudo firewall-cmd --zone=public --list-services<\/code><\/pre>\n
    Art\u0131k ssh<\/code> listede olmal\u0131d\u0131r.<\/p>\n
Bu yap\u0131land\u0131rma ile, sunucunuza yaln\u0131zca SSH \u00fczerinden eri\u015filebilir olacak, di\u011fer t\u00fcm gelen ba\u011flant\u0131lar engellenecektir.<\/p>\n
Senaryo 2: Web Sunucusu (HTTP ve HTTPS)<\/h4>\n
Bir web sunucusunu bar\u0131nd\u0131r\u0131yorsan\u0131z, HTTP (port 80) ve HTTPS (port 443) trafi\u011fine izin vermeniz gerekir.<\/p>\n
1.  public<\/code> b\u00f6lgesine http<\/code> ve https<\/code> servislerini ekleyin (e\u011fer daha \u00f6nce eklenmediyse):<\/strong><\/p>\n
sudo firewall-cmd --zone=public --add-service=http --permanent\n    sudo firewall-cmd --zone=public --add-service=https --permanent\n    sudo firewall-cmd --reload<\/code><\/pre>\n
2.  Kurallar\u0131 do\u011frulay\u0131n:<\/strong><\/p>\n
sudo firewall-cmd --zone=public --list-services<\/code><\/pre>\n
    ssh<\/code>, http<\/code>, https<\/code> gibi servislerin listede olmas\u0131 gerekir.<\/p>\n
E\u011fer farkl\u0131 bir portta \u00e7al\u0131\u015fan bir web servisi varsa (\u00f6rne\u011fin, 8080 portunda \u00e7al\u0131\u015fan bir uygulama), bu portu da a\u00e7man\u0131z gerekir:<\/p>\n
sudo firewall-cmd --zone=public --add-port=8080\/tcp --permanent\nsudo firewall-cmd --reload<\/code><\/pre>\n
Senaryo 3: Belirli Bir IP Adresinden Gelen SSH Eri\u015fimi<\/h4>\n
G\u00fcvenli\u011fi art\u0131rmak i\u00e7in SSH eri\u015fimini sadece belirli bir IP adresinden veya alt a\u011fdan gelen ba\u011flant\u0131lara k\u0131s\u0131tlayabilirsiniz.<\/p>\n
1.  \u00d6nce t\u00fcm SSH eri\u015fimini kald\u0131r\u0131n (e\u011fer a\u00e7\u0131ksa):<\/strong><\/p>\n
sudo firewall-cmd --zone=public --remove-service=ssh --permanent\n    sudo firewall-cmd --reload<\/code><\/pre>\n
2.  Belirli bir IP adresinden (\u00f6rne\u011fin, 192.168.1.100) SSH eri\u015fimine izin verin:<\/strong><\/p>\n
sudo firewall-cmd --zone=public --add-rich-rule='rule family="ipv4" source address="192.168.1.100" service name="ssh" accept' --permanent\n    sudo firewall-cmd --reload<\/code><\/pre>\n
3.  Belirli bir alt a\u011fdan (\u00f6rne\u011fin, 192.168.1.0\/24) SSH eri\u015fimine izin verin:<\/strong><\/p>\n
sudo firewall-cmd --zone=public --add-rich-rule='rule family="ipv4" source address="192.168.1.0\/24" service name="ssh" accept' --permanent\n    sudo firewall-cmd --reload<\/code><\/pre>\n
Rich kurallar (--add-rich-rule<\/code>), daha karma\u015f\u0131k ve ayr\u0131nt\u0131l\u0131 g\u00fcvenlik duvar\u0131 kurallar\u0131 olu\u015fturman\u0131za olanak tan\u0131r.<\/p>\n
Senaryo 4: Gelen Ping (ICMP) \u0130steklerini Engelleme<\/h4>\n
Baz\u0131 durumlarda, sunucunuzun ping (ICMP echo-request) isteklerine yan\u0131t vermesini istemeyebilirsiniz.<\/p>\n
1.  public<\/code> b\u00f6lgesindeki icmp-block-inversion<\/code> \u00f6zelli\u011fini etkinle\u015ftirin (bu, varsay\u0131lan olarak engellenen ICMP t\u00fcrlerini engellemenizi sa\u011flar):<\/strong><\/p>\n
sudo firewall-cmd --zone=public --add-icmp-block=echo-request --permanent\n    sudo firewall-cmd --reload<\/code><\/pre>\n
    Veya, daha genel bir yakla\u015f\u0131mla, drop<\/code> veya block<\/code> b\u00f6lgesini kullanabilirsiniz. Ancak, public<\/code> b\u00f6lgesinde belirli ICMP t\u00fcrlerini engellemek daha yayg\u0131nd\u0131r.<\/p>\n
2.  Kurallar\u0131 do\u011frulay\u0131n:<\/strong><\/p>\n
sudo firewall-cmd --zone=public --list-icmp-blocks<\/code><\/pre>\n
    echo-request<\/code> listede olmal\u0131d\u0131r.<\/p>\n
Senaryo 5: Giden Trafi\u011fi K\u0131s\u0131tlama (Daha \u0130leri Seviye)<\/h4>\n
Genellikle g\u00fcvenlik duvarlar\u0131 gelen trafi\u011fi kontrol etmek i\u00e7in kullan\u0131l\u0131r, ancak giden trafi\u011fi de k\u0131s\u0131tlamak m\u00fcmk\u00fcnd\u00fcr. Bu daha karma\u015f\u0131k senaryolar i\u00e7in ge\u00e7erlidir. \u00d6rne\u011fin, sunucunuzun sadece belirli sitelere veya IP adreslerine eri\u015fmesini sa\u011flamak isteyebilirsiniz. Bu, genellikle masquerade<\/code> ve forward<\/code> kurallar\u0131 ile birlikte kullan\u0131l\u0131r ve daha derinlemesine bir a\u011f bilgisi gerektirir.<\/p>\n
\u00d6rne\u011fin, sunucunuzun sadece belirli bir d\u0131\u015f IP adresine (\u00f6rne\u011fin, 1.2.3.4) TCP port 80 \u00fczerinden eri\u015fmesine izin vermek i\u00e7in:<\/p>\n
sudo firewall-cmd --zone=external --add-forward-port=port=80:proto=tcp:toport=80:toaddr=1.2.3.4 --permanent\nsudo firewall-cmd --reload<\/code><\/pre>\n
Bu \u00f6rnek, NAT ve port y\u00f6nlendirme ile birlikte d\u00fc\u015f\u00fcn\u00fclebilir ve dikkatli yap\u0131land\u0131rma gerektirir.<\/p>\n
firewalld’\u0131 Y\u00f6netmek \u0130\u00e7in \u0130pu\u00e7lar\u0131 ve En \u0130yi Uygulamalar<\/h3>\n
*   --permanent<\/code> Se\u00e7ene\u011fini Unutmay\u0131n:<\/strong> Kal\u0131c\u0131 de\u011fi\u015fiklikler yapmak i\u00e7in her zaman --permanent<\/code> se\u00e7ene\u011fini kullan\u0131n ve ard\u0131ndan firewall-cmd --reload<\/code> ile uygulay\u0131n. Aksi takdirde yapt\u0131\u011f\u0131n\u0131z de\u011fi\u015fiklikler sistem yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda kaybolur.
\n*   --list-all<\/code> ile Do\u011frulay\u0131n:<\/strong> Yapt\u0131\u011f\u0131n\u0131z her de\u011fi\u015fiklikten sonra sudo firewall-cmd --zone= --list-all<\/code> komutuyla kurallar\u0131 kontrol edin.
\n*   Servisleri Kullan\u0131n:<\/strong> M\u00fcmk\u00fcn oldu\u011funca port numaralar\u0131 yerine servis adlar\u0131n\u0131 (\u00f6rn. ssh<\/code>, http<\/code>, https<\/code>) kullan\u0131n. Bu, kurallar\u0131 daha okunabilir ve y\u00f6netilebilir hale getirir.
\n*   B\u00f6lgeleri Ak\u0131ll\u0131ca Kullan\u0131n:<\/strong> Farkl\u0131 a\u011f ortamlar\u0131 i\u00e7in farkl\u0131 b\u00f6lgeler tan\u0131mlay\u0131n ve her b\u00f6lgeye uygun g\u00fcvenlik seviyelerini uygulay\u0131n. \u00d6rne\u011fin, bir sunucunun d\u0131\u015f d\u00fcnyaya a\u00e7\u0131k olan aray\u00fcz\u00fc external<\/code> b\u00f6lgesinde, i\u00e7 a\u011fa ba\u011flanan aray\u00fcz\u00fc ise internal<\/code> b\u00f6lgesinde olabilir.
\n*   Rich Kurallar\u0131 Dikkatli Kullan\u0131n:<\/strong> Rich kurallar g\u00fc\u00e7l\u00fcd\u00fcr ancak karma\u015f\u0131k hale gelebilir. Anla\u015f\u0131l\u0131r ve test edilmi\u015f kurallar yazmaya \u00f6zen g\u00f6sterin.
\n*   SELinux ile Entegrasyon:<\/strong> firewalld<\/code>, SELinux ile birlikte \u00e7al\u0131\u015f\u0131r. E\u011fer SELinux etkinse, firewalld<\/code>‘\u0131n bir servise veya porta izin vermesi durumunda SELinux’un da bu eri\u015fime izin verdi\u011finden emin olun. Genellikle firewalld<\/code> kurallar\u0131 SELinux’u da dikkate al\u0131r.
\n*   Belgeleme:<\/strong> Yapt\u0131\u011f\u0131n\u0131z g\u00fcvenlik duvar\u0131 yap\u0131land\u0131rmalar\u0131n\u0131 belgeleyin. Hangi portlar\u0131n neden a\u00e7\u0131k oldu\u011funu, hangi servislerin \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 not al\u0131n.
\n*   Test Edin:<\/strong> Kurulumunuzu tamamlad\u0131ktan sonra, izin verilen ve reddedilen ba\u011flant\u0131lar\u0131 test ederek g\u00fcvenlik duvar\u0131n\u0131z\u0131n beklendi\u011fi gibi \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olun.<\/p>\n
Sonu\u00e7<\/h3>\n
firewalld<\/code>, Rocky Linux 9 sistemlerinizde a\u011f g\u00fcvenli\u011fini sa\u011flamak i\u00e7in g\u00fc\u00e7l\u00fc, esnek ve kullan\u0131m\u0131 kolay bir ara\u00e7t\u0131r. Dinamik yap\u0131land\u0131rma yetenekleri, b\u00f6lge tabanl\u0131 yakla\u015f\u0131m\u0131 ve servis tabanl\u0131 kural tan\u0131mlamas\u0131 sayesinde, sistemlerinizin g\u00fcvenli\u011fini etkili bir \u015fekilde y\u00f6netebilirsiniz. Bu makalede ele al\u0131nan temel komutlar ve senaryolar, firewalld<\/code>‘\u0131 kullanarak sistemleriniz i\u00e7in sa\u011flam bir g\u00fcvenlik duvar\u0131 olu\u015fturman\u0131za yard\u0131mc\u0131 olacakt\u0131r. Unutmay\u0131n, g\u00fcvenlik s\u00fcrekli bir s\u00fcre\u00e7tir ve g\u00fcvenlik duvar\u0131 yap\u0131land\u0131rmalar\u0131n\u0131z\u0131 d\u00fczenli olarak g\u00f6zden ge\u00e7irmek ve g\u00fcncellemek \u00f6nemlidir.<\/p>\n","protected":false},"excerpt":{"rendered":"firewalld ile Rocky Linux 9’da G\u00fcvenlik Duvar\u0131 Kurulumu Rocky Linux 9, sunucu ve i\u015f istasyonlar\u0131 i\u00e7in sa\u011flam ve g\u00fcvenli bir i\u015fletim sistemidir.","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[241],"tags":[],"class_list":{"0":"post-43514","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-linux","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nfirewalld ile Rocky Linux 9'da G\u00fcvenlik Duvar\u0131 Kurulumu - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"firewalld ile Rocky Linux 9'da G\u00fcvenlik Duvar\u0131 Kurulumu\" \/>\n<meta property=\"og:description\" content=\"firewalld ile Rocky Linux 9'da G\u00fcvenlik Duvar\u0131 Kurulumu Rocky Linux 9, sunucu ve i\u015f istasyonlar\u0131 i\u00e7in sa\u011flam ve g\u00fcvenli bir i\u015fletim sistemidir.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-22T05:00:52+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"firewalld ile Rocky Linux 9’da G\u00fcvenlik Duvar\u0131 Kurulumu\",\"datePublished\":\"2026-07-22T05:00:52+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/\"},\"wordCount\":1752,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Linux\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/\",\"name\":\"firewalld ile Rocky Linux 9'da G\u00fcvenlik Duvar\u0131 Kurulumu - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-07-22T05:00:52+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"firewalld ile Rocky Linux 9’da G\u00fcvenlik Duvar\u0131 Kurulumu\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"firewalld ile Rocky Linux 9'da G\u00fcvenlik Duvar\u0131 Kurulumu - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/","og_locale":"tr_TR","og_type":"article","og_title":"firewalld ile Rocky Linux 9'da G\u00fcvenlik Duvar\u0131 Kurulumu","og_description":"firewalld ile Rocky Linux 9'da G\u00fcvenlik Duvar\u0131 Kurulumu Rocky Linux 9, sunucu ve i\u015f istasyonlar\u0131 i\u00e7in sa\u011flam ve g\u00fcvenli bir i\u015fletim sistemidir.","og_url":"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-07-22T05:00:52+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"10 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"firewalld ile Rocky Linux 9’da G\u00fcvenlik Duvar\u0131 Kurulumu","datePublished":"2026-07-22T05:00:52+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/"},"wordCount":1752,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Linux"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/","url":"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/","name":"firewalld ile Rocky Linux 9'da G\u00fcvenlik Duvar\u0131 Kurulumu - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-07-22T05:00:52+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/firewalld-ile-rocky-linux-9da-guvenlik-duvari-kurulumu\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"firewalld ile Rocky Linux 9’da G\u00fcvenlik Duvar\u0131 Kurulumu"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/43514","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=43514"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/43514\/revisions"}],"predecessor-version":[{"id":43515,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/43514\/revisions\/43515"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=43514"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=43514"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=43514"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}