{"id":9832,"date":"2024-03-30T22:48:51","date_gmt":"2024-03-30T19:48:51","guid":{"rendered":"https:\/\/sunucun.com.tr\/bilgi\/?post_type=dt_articles&#038;p=9832"},"modified":"2026-02-06T20:31:51","modified_gmt":"2026-02-06T17:31:51","slug":"fail2ban-kurulumu-nasil-yapilir","status":"publish","type":"post","link":"https:\/\/sunucun.com.tr\/blog\/fail2ban-kurulumu-nasil-yapilir\/","title":{"rendered":"Fail2Ban kurulumu nas\u0131l yap\u0131l\u0131r?"},"content":{"rendered":"<h2 class=\"wp-block-heading\">Fail2Ban Kurulumu Nas\u0131l Yap\u0131l\u0131r?<\/h2>\n<p class=\"has-text-color has-link-color has-medium-font-size wp-elements-eb255d70029f8149803417b0084a9ccc\" style=\"color: #000000;\">Fail2Ban, sunucular\u0131 otomatik sald\u0131r\u0131 denemelerine kar\u015f\u0131 koruyan bir g\u00fcvenlik arac\u0131d\u0131r. Kurulumu ve kullan\u0131m\u0131, sistem g\u00fcvenli\u011fini art\u0131rmak isteyen herkes i\u00e7in \u00f6nemlidir. \u0130\u015fte Fail2Ban kurulum s\u00fcreci ve kullan\u0131m\u0131 hakk\u0131nda detayl\u0131 bir rehber:<\/p>\n<figure class=\"wp-block-image size-large is-resized\"><img fetchpriority=\"high\" fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"454\" class=\"wp-image-9833\" style=\"width: 606px; height: auto;\" src=\"https:\/\/www.sunucun.com.tr\/blog\/\/wp-content\/uploads\/2024\/03\/1685207257405-1024x454.png\" alt=\"Fail2Ban kurulumu i\u00e7in g\u00f6rsel rehber.\" srcset=\"https:\/\/sunucun.com.tr\/blog\/wp-content\/uploads\/2024\/03\/1685207257405-1024x454.png 1024w, https:\/\/sunucun.com.tr\/blog\/wp-content\/uploads\/2024\/03\/1685207257405-300x133.png 300w, https:\/\/sunucun.com.tr\/blog\/wp-content\/uploads\/2024\/03\/1685207257405-768x341.png 768w, https:\/\/sunucun.com.tr\/blog\/wp-content\/uploads\/2024\/03\/1685207257405.png 1280w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption>Fail2Ban kurulumu i\u00e7in g\u00f6rsel rehber.<\/figcaption><\/figure>\n<h2 class=\"wp-block-heading\">Neden Fail2Ban?<\/h2>\n<p>Sunucular, siber sald\u0131r\u0131lara kar\u015f\u0131 savunmas\u0131z olabilir, \u00f6zellikle de hizmet reddi (DoS) sald\u0131r\u0131lar\u0131 veya brute-force parola sald\u0131r\u0131lar\u0131 gibi. Fail2Ban, bu t\u00fcr sald\u0131r\u0131lar\u0131 engelleyerek sunucu g\u00fcvenli\u011fini \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131r\u0131r. K\u00f6t\u00fc niyetli trafik alg\u0131land\u0131\u011f\u0131nda, ilgili IP adresini ge\u00e7ici olarak engelleyerek sunucuya eri\u015fimi k\u0131s\u0131tlar. Fail2Ban, siber tehditlere kar\u015f\u0131 etkin bir savunma hatt\u0131 kurar ve sistem y\u00f6neticilerinin g\u00fcvenlik olaylar\u0131na proaktif bir \u015fekilde yan\u0131t vermesini sa\u011flar.<\/p>\n<h2 class=\"wp-block-heading\">Nas\u0131l Kullan\u0131l\u0131r?<\/h2>\n<p>Fail2Ban&#8217;\u0131n kurulumu ve kullan\u0131m\u0131, \u00e7o\u011fu Linux da\u011f\u0131t\u0131m\u0131nda basit birka\u00e7 ad\u0131mda ger\u00e7ekle\u015ftirilebilir. Genel bir kurulum s\u00fcreci a\u015fa\u011f\u0131daki gibidir:<\/p>\n<ol class=\"wp-block-list\">\n<li><strong>Kurulum:<\/strong> Fail2Ban, \u00e7o\u011fu Linux da\u011f\u0131t\u0131m\u0131n\u0131n resmi paket depolar\u0131nda bulunur. Debian ve Ubuntu gibi Debian tabanl\u0131 sistemlerde <code>sudo apt-get install fail2ban<\/code> komutuyla, CentOS ve Fedora gibi RPM tabanl\u0131 sistemlerde ise <code>sudo yum install fail2ban<\/code> veya <code>sudo dnf install fail2ban<\/code> komutlar\u0131yla kurulabilir.<\/li>\n<li><strong>Yap\u0131land\u0131rma:<\/strong> Fail2Ban&#8217;\u0131n yap\u0131land\u0131rma dosyalar\u0131 <code>\/etc\/fail2ban<\/code> dizininde bulunur. Ana yap\u0131land\u0131rma dosyas\u0131 <code>jail.conf<\/code>dur, ancak do\u011frudan bu dosyay\u0131 d\u00fczenlemek yerine, \u00f6zel ayarlar\u0131n\u0131z i\u00e7in <code>jail.local<\/code> dosyas\u0131 olu\u015fturup kullanman\u0131z \u00f6nerilir. Bu \u015fekilde, sistem g\u00fcncellemeleri s\u0131ras\u0131nda yap\u0131land\u0131rmalar\u0131n\u0131z\u0131n \u00fczerine yaz\u0131lma riskini azaltm\u0131\u015f olursunuz.<\/li>\n<li><strong>Servisleri Yap\u0131land\u0131rma:<\/strong> Fail2Ban, SSH, Apache, Nginx ve Postfix gibi \u00e7e\u015fitli servisler i\u00e7in \u00f6nceden tan\u0131ml\u0131 filtreler ve eylemler sunar. Bu servisleri korumak i\u00e7in ilgili <code>jail<\/code> ayarlar\u0131n\u0131 <code>jail.local<\/code> dosyan\u0131zda etkinle\u015ftirmeniz gerekir. \u00d6rne\u011fin, SSH i\u00e7in <code>[sshd]<\/code> k\u0131sm\u0131n\u0131 etkinle\u015ftirerek yap\u0131land\u0131rabilirsiniz: <code>[sshd] enabled = true port = ssh filter = sshd logpath = \/var\/log\/auth.log maxretry = 3<\/code>. Bu ayar, belirli bir s\u00fcre i\u00e7inde belirlenen maksimum deneme say\u0131s\u0131n\u0131 a\u015fan IP adreslerini engeller.<\/li>\n<li><strong>Fail2Ban\u2019\u0131 Ba\u015flatma ve Test Etme:<\/strong> Yap\u0131land\u0131rman\u0131z\u0131 tamamlad\u0131ktan sonra, Fail2Ban servisini ba\u015flat\u0131n (<code>sudo systemctl start fail2ban<\/code>) ve otomatik ba\u015flamas\u0131 i\u00e7in etkinle\u015ftirin (<code>sudo systemctl enable fail2ban<\/code>). Daha sonra, yap\u0131land\u0131rman\u0131z\u0131n do\u011fru \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in testler yapabilirsiniz. \u00d6rne\u011fin, belirli bir IP adresini sim\u00fcle ederek sald\u0131r\u0131 denemesi yapabilir ve Fail2Ban&#8217;\u0131n bu adresi ba\u015far\u0131yla engelleyip engellemedi\u011fini kontrol edebilirsiniz.<\/li>\n<\/ol>\n<h2 class=\"wp-block-heading\">Yap\u0131lar\u0131 nedir?<\/h2>\n<p>Fail2Ban, birka\u00e7 temel bile\u015fenden olu\u015fur:<\/p>\n<ul class=\"wp-block-list\">\n<li><strong>Jail&#8217;ler:<\/strong> Bir veya birden fazla servis i\u00e7in belirli kurallar ve eylemler tan\u0131mlayan yap\u0131land\u0131rmalard\u0131r. kontrol etmek i\u00e7in testler yapabilirsiniz. \u00d6rne\u011fin, belirli bir IP adresini sim\u00fcle ederek sald\u0131r\u0131 denemesi yapabilir ve Fail2Ban&#8217;\u0131n bu adresi ba\u015far\u0131yla engelleyip engellemedi\u011fini kontrol edebilirsiniz. Her jail, belirli bir hizmeti korumak i\u00e7in tasarlanm\u0131\u015ft\u0131r ve ilgili log dosyalar\u0131n\u0131 izleyerek sald\u0131r\u0131 tespiti yapar.<\/li>\n<li><strong>Filtreler:<\/strong> Log dosyalar\u0131nda belirli desenleri arayan ve k\u00f6t\u00fc niyetli aktiviteleri tespit eden ifadelerdir. Filtreler, log dosyalar\u0131nda belirtilen k\u00f6t\u00fc niyetli davran\u0131\u015flar\u0131 tan\u0131r ve bu davran\u0131\u015flara g\u00f6re IP adreslerini engeller.<\/li>\n<li><strong>Eylemler:<\/strong> Belirlenen k\u00f6t\u00fc niyetli aktivite tespit edildi\u011finde yap\u0131lacak i\u015flemleri tan\u0131mlar, genellikle IP adresini engellemektir. Eylemler, sistem y\u00f6neticilerine sald\u0131r\u0131 tespit edildi\u011finde ne yap\u0131laca\u011f\u0131n\u0131 belirleme esnekli\u011fi sa\u011flar.<\/li>\n<\/ul>\n<h2 class=\"wp-block-heading\">\u00d6nemi nedir?<\/h2>\n<p>Fail2Ban, otomatik sald\u0131r\u0131lara kar\u015f\u0131 proaktif bir koruma sa\u011flayarak sunucu g\u00fcvenli\u011fini \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131r\u0131r. Sistem kaynaklar\u0131n\u0131 korur ve y\u00f6neticilere olas\u0131 g\u00fcvenlik tehditleri hakk\u0131nda bilgi verir. Fail2Ban, ayr\u0131ca yanl\u0131\u015f pozitifleri azaltarak yaln\u0131zca k\u00f6t\u00fc niyetli trafi\u011fi engeller, bu da sunucu eri\u015filebilirli\u011fini korur.<\/p>\n<p>Fail2Ban&#8217;\u0131n do\u011fru yap\u0131land\u0131r\u0131lmas\u0131, Fail2Ban, Linux sunucular\u0131 i\u00e7in vazge\u00e7ilmez bir g\u00fcvenlik arac\u0131d\u0131r. Kurulumu ve yap\u0131land\u0131rmas\u0131 nispeten basittir, ancak sunulan koruma d\u00fczeyi g\u00f6z \u00f6n\u00fcne al\u0131nd\u0131\u011f\u0131nda, her sunucu y\u00f6neticisinin bu arac\u0131 kullanmas\u0131 \u015fiddetle tavsiye edilir. \u00f6zellikle s\u0131k s\u0131k sald\u0131r\u0131ya maruz kalan sunucular i\u00e7in hayati \u00f6nem ta\u015f\u0131r. Sunucu y\u00f6neticileri, Fail2Ban&#8217;\u0131n sundu\u011fu esneklik sayesinde, belirli sald\u0131r\u0131 t\u00fcrlerine kar\u015f\u0131 hassas olan hizmetleri koruyabilir ve bu sayede sistemin genel g\u00fcvenli\u011fini art\u0131rabilir.<\/p>\n<h2 class=\"wp-block-heading\">Sonu\u00e7<\/h2>\n<p>Fail2Ban, Linux sunucular\u0131 i\u00e7in vazge\u00e7ilmez bir g\u00fcvenlik arac\u0131d\u0131r. Kurulumu ve yap\u0131land\u0131rmas\u0131 nispeten basittir, ancak sunulan koruma d\u00fczeyi g\u00f6z \u00f6n\u00fcne al\u0131nd\u0131\u011f\u0131nda, her sunucu y\u00f6neticisinin bu arac\u0131 kullanmas\u0131 \u015fiddetle tavsiye edilir. Fail2Ban ile sunucunuzu kontrol etmek i\u00e7in testler yapabilirsiniz. \u00d6rne\u011fin, belirli bir IP adresini sim\u00fcle ederek sald\u0131r\u0131 denemesi yapabilir ve Fail2Ban&#8217;\u0131n bu adresi ba\u015far\u0131yla engelleyip engellemedi\u011fini kontrol edebilirsiniz. koruyarak, siber sald\u0131r\u0131lar\u0131n potansiyel zararlar\u0131n\u0131 minimuma indirebilirsiniz. Daha detayl\u0131 bilgi i\u00e7in <a href=\"https:\/\/sunucun.com.tr\/blog\/fail2ban-kurulumu-nasil-yapilir\/\">How to Set Fail2Ban Settings<\/a> makalesine g\u00f6z atabilirsiniz.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Fail2Ban Kurulumu Nas\u0131l Yap\u0131l\u0131r? Fail2Ban, sunucular\u0131 otomatik sald\u0131r\u0131 denemelerine kar\u015f\u0131 koruyan bir g\u00fcvenlik arac\u0131d\u0131r. Kurulumu ve kullan\u0131m\u0131, sistem g\u00fcvenli\u011fini art\u0131rmak isteyen herkes i\u00e7in \u00f6nemlidir. \u0130\u015fte Fail2Ban kurulum s\u00fcreci ve kullan\u0131m\u0131 hakk\u0131nda detayl\u0131 bir rehber: Fail2Ban kurulumu i\u00e7in g\u00f6rsel rehber. Neden Fail2Ban? Sunucular, siber sald\u0131r\u0131lara kar\u015f\u0131 savunmas\u0131z olabilir, \u00f6zellikle de hizmet reddi (DoS) sald\u0131r\u0131lar\u0131 veya brute-force&hellip;<\/p>\n","protected":false},"author":1,"featured_media":9833,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[1525,1521],"tags":[],"class_list":["post-9832","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-siber-guvenlik","category-teknoloji"],"_links":{"self":[{"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/posts\/9832","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=9832"}],"version-history":[{"count":1,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/posts\/9832\/revisions"}],"predecessor-version":[{"id":19594,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/posts\/9832\/revisions\/19594"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/media\/9833"}],"wp:attachment":[{"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=9832"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=9832"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sunucun.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=9832"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}