{"id":1411,"date":"2020-02-25T11:51:51","date_gmt":"2020-02-25T11:51:51","guid":{"rendered":"http:\/\/blog.inetmar.com\/?p=1411"},"modified":"2024-07-27T11:50:35","modified_gmt":"2024-07-27T08:50:35","slug":"csf-kurulum-ve-ayarlari","status":"publish","type":"post","link":"https:\/\/www.inetmar.com\/blog\/csf-kurulum-ve-ayarlari\/","title":{"rendered":"CSF Kurulum ve Ayarlar\u0131"},"content":{"rendered":"

Merhaba<\/p>\n

Cpanel kulland\u0131\u011f\u0131n\u0131z sunucu \u00fczerinde, port kapatma, \u00e7e\u015fitli kural zincirleri olu\u015fturmak vb. i\u015flemler i\u00e7in CSF kurabilirsiniz, CSF tamamen bir firewall vb. de\u011fildir sadece IPTABLES\u2019i y\u00f6netebilen bir scripttir. CSF de yazaca\u011f\u0131n\u0131z, olu\u015fturaca\u011f\u0131n\u0131z kurallar\u0131n IPTABLES \u2018e eklenece\u011fini unutmay\u0131n, ileri d\u00fczeyde kullan\u0131c\u0131ysan\u0131z iptables ve ipset ikilisi ile daha verimli ve h\u0131zl\u0131 kural gruplar\u0131 olu\u015fturabilirsiniz.<\/p>\n

CSF indirmek ve kurmak i\u00e7in \u00f6ncelikle ssh ile sunucumuza ba\u011flanal\u0131m ve a\u015fa\u011f\u0131daki komutlar\u0131 s\u0131ras\u0131yla verelim;<\/p>\n

wget http:\/\/www.configserver.com\/free\/csf.tgz
\ntar -xzf csf.tgz
\ncd csf
\nsh install.sh<\/p><\/blockquote>\n

csf son versiyonu kurulmu\u015f oldu, \u00a0IPTables mod\u00fclleri var m\u0131, yok mu kontrol edelim;<\/p>\n

perl \/etc\/csf\/csftest.pl<\/p><\/blockquote>\n

herhangi bir hata yoksa CSF \u00e7al\u0131\u015facakt\u0131r. CSF\u2019yi apf ile birlikte kullanmay\u0131n, her ikisi de iptables\u2019i kullan\u0131yor \u00fcst \u00fcste \u00e7al\u0131\u015ft\u0131\u011f\u0131nda s\u0131k\u0131nt\u0131 oluyor.<\/p>\n

WHM panelinizden Plugin k\u0131sm\u0131ndan ConfigServer Security & Firewall \u2018a girerek ayarlar\u0131 yapabilirsiniz, Cpanel portlar\u0131n\u0131 otomatik ekliyor, farkl\u0131 ssh, ftp portu vb. kullan\u0131yorsan\u0131z TCP_IN\u2019e eklemelisiniz.<\/p>\n

Firewall Configration\u2019a girip ayarlar\u0131 yapabilirsiniz, baz\u0131 ayarlar,<\/p>\n

TESTING \u00a0<\/strong>> T\u00fcm ayarlar\u0131 yapt\u0131ktan sonra test modundan \u00e7\u0131karmak i\u00e7in 0 yapmakta fayda var, aksi halde 5 dakikada bir iptables kurallar\u0131 kald\u0131r\u0131lacakt\u0131r.<\/p>\n

TCP_IN<\/strong> \u00a0> Gelen TCP portlar\u0131ndan hangilerine izin verecekseniz,\u00a020,21,22,25,53,80,110,143,443,465,587,993,995,2077,2078,2082,2083,2086,2087,2095,2096 vb. gibi
\nTCP_OUT<\/strong> > D\u0131\u015far\u0131ya cevap verecek TCP portlar\u0131\u00a020,21,22,25,37,43,53,80,110,113,443,587,873,2087,2089,2703,7516,161,7080\u00a0 gibi..<\/p>\n

UDP_IN<\/strong> \u00a0> UDP gelen portlar;\u00a020,21,53,161 gibi
\nUDP_OUT<\/strong> > UDP giden portlar;\u00a020,21,53,113,123,873,6277,161 gibi<\/p>\n

ICMP_IN<\/strong> \u00a0> Gelen Ping\u2019e izin vermek istiyorsan\u0131z, 1 yapmal\u0131s\u0131n\u0131z, 0 yaparsan\u0131z ping request time out olacakt\u0131r. ping at\u0131lamayacakt\u0131r.<\/p>\n

CSF ana sayfas\u0131nda quick allow, deny gibi k\u0131s\u0131mlardan kolayca IP engelleyebilir, IP engeli kald\u0131rabilirsiniz, \u00a0SSH\u2019dan ise a\u015fa\u011f\u0131daki komutlarla kolayca i\u015flem yapabilirsiniz;<\/p>\n

csf -a IP_ADRESI<\/strong> > Belirtilen IP adresine izin verir, ayarl\u0131 olan firewall kurallar\u0131 bu IP adresine i\u015flemez.<\/p>\n

csf -d IP_ADRESI<\/strong> > Belirtilen IP adresinin sunucuya eri\u015fimini keser.<\/p>\n

csf -r<\/strong> > CSF\u2019yi restart eder<\/p>\n

csf -x<\/strong> > CSF\u2019yi kapat\u0131r, devred\u0131\u015f\u0131 eder.<\/p>\n

csf -e<\/strong> > CSF kapal\u0131 konumda iken aktifle\u015ftirir<\/p><\/blockquote>\n

Configration sayfas\u0131nda bir \u00e7ok ayar mevcut, altlar\u0131nda ne anlama geldiklerini de yazm\u0131\u015flar, oralardan yola \u00e7\u0131karak kendi yap\u0131n\u0131za g\u00f6re ayar yapabilirsiniz.<\/p>\n

VDS sat\u0131n al<\/a> ve avantajlar\u0131ndan hemen yararlanmaya ba\u015flay\u0131n.<\/p>\n","protected":false},"excerpt":{"rendered":"

Merhaba Cpanel kulland\u0131\u011f\u0131n\u0131z sunucu \u00fczerinde, port kapatma, \u00e7e\u015fitli kural zincirleri olu\u015fturmak vb. i\u015flemler i\u00e7in CSF kurabilirsiniz, CSF tamamen bir firewall vb. de\u011fildir sadece IPTABLES\u2019i y\u00f6netebilen bir scripttir. CSF de yazaca\u011f\u0131n\u0131z, olu\u015fturaca\u011f\u0131n\u0131z kurallar\u0131n IPTABLES \u2018e eklenece\u011fini...<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[47,52,11,46],"tags":[],"class_list":["post-1411","post","type-post","status-publish","format-standard","hentry","category-centos","category-guvenlik","category-linux","category-sunucu"],"_links":{"self":[{"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/posts\/1411","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/comments?post=1411"}],"version-history":[{"count":2,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/posts\/1411\/revisions"}],"predecessor-version":[{"id":9379,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/posts\/1411\/revisions\/9379"}],"wp:attachment":[{"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/media?parent=1411"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/categories?post=1411"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/tags?post=1411"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}