{"id":3128,"date":"2026-07-12T12:40:18","date_gmt":"2026-07-12T12:40:18","guid":{"rendered":"https:\/\/hostligo.com\/blog\/?p=3128"},"modified":"2026-07-12T12:40:18","modified_gmt":"2026-07-12T12:40:18","slug":"ubuntu-ve-centos-sunucularda-guvenlik-duvari-ufw-ve-firewalld-yapilandirma-rehberi","status":"publish","type":"post","link":"https:\/\/hostligo.com\/blog\/ubuntu-ve-centos-sunucularda-guvenlik-duvari-ufw-ve-firewalld-yapilandirma-rehberi\/","title":{"rendered":"Ubuntu ve CentOS Sunucularda G\u00fcvenlik Duvar\u0131 (UFW ve Firewalld) Yap\u0131land\u0131rma Rehberi"},"content":{"rendered":"

Ubuntu ve CentOS Sunucularda UFW ve Firewalld ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rmas\u0131<\/h2>\n

G\u00fcvenlik duvar\u0131, bir sunucunun g\u00fcvenli\u011fini sa\u011flamak i\u00e7in hayati \u00f6neme sahiptir. Ubuntu ve CentOS gibi pop\u00fcler Linux da\u011f\u0131t\u0131mlar\u0131, g\u00fcvenlik duvar\u0131 y\u00f6netimi i\u00e7in iki ana ara\u00e7 sunmaktad\u0131r: UFW (Uncomplicated Firewall) ve Firewalld. Bu makalede, her iki arac\u0131n nas\u0131l yap\u0131land\u0131r\u0131laca\u011f\u0131 ve y\u00f6netilece\u011fi hakk\u0131nda detayl\u0131 bir rehber sunaca\u011f\u0131z.<\/p>\n

Ubuntu, UFW’yi varsay\u0131lan g\u00fcvenlik duvar\u0131 arac\u0131 olarak kullan\u0131rken, CentOS ise genellikle Firewalld’yi tercih eder. Her iki ara\u00e7 da kullan\u0131c\u0131lar\u0131n sistemlerini korumak i\u00e7in gerekli kurallar\u0131 basit bir \u015fekilde olu\u015fturmas\u0131na olanak tan\u0131r. UFW daha kullan\u0131m\u0131 kolay bir aray\u00fcze sahipken, Firewalld daha karma\u015f\u0131k kurulumlar i\u00e7in daha fazla esneklik sunar.<\/p>\n

UFW (Uncomplicated Firewall) ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rmas\u0131<\/h3>\n

UFW, Ubuntu \u00fczerinde g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 y\u00f6netmek i\u00e7in basit bir komut sat\u0131r\u0131 arac\u0131d\u0131r. UFW ile g\u00fcvenlik duvar\u0131n\u0131z\u0131 yap\u0131land\u0131rmak i\u00e7in a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 izleyebilirsiniz:<\/p>\n

    \n
  1. UFW’yi etkinle\u015ftirin:\n
    sudo ufw enable<\/code><\/pre>\n<\/li>\n
  2. Varsay\u0131lan politikalar\u0131 ayarlay\u0131n (gelen trafi\u011fi reddetmek i\u00e7in):\n
    sudo ufw default deny incoming<\/code><\/pre>\n
    sudo ufw default allow outgoing<\/code><\/pre>\n<\/li>\n
  3. Belirli bir portu a\u00e7mak i\u00e7in:\n
    sudo ufw allow 22<\/code><\/pre>\n<\/li>\n
  4. UFW durumunu kontrol edin:\n
    sudo ufw status<\/code><\/pre>\n<\/li>\n<\/ol>\n
    Firewalld ile G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rmas\u0131<\/h3>\n
    Firewalld, CentOS \u00fczerinde daha dinamik bir g\u00fcvenlik duvar\u0131 y\u00f6netimi sa\u011flar. Firewalld, b\u00f6lge tabanl\u0131 bir yap\u0131 kullanarak, a\u011f ba\u011flant\u0131lar\u0131n\u0131 y\u00f6netmenizi sa\u011flar. Firewalld ile g\u00fcvenlik duvar\u0131 olu\u015fturmak i\u00e7in \u015fu ad\u0131mlar\u0131 izleyebilirsiniz:<\/p>\n
      \n
    1. Firewalld’yi ba\u015flat\u0131n:\n
      sudo systemctl start firewalld<\/code><\/pre>\n<\/li>\n
    2. Firewalld’nin durumunu kontrol edin:\n
      sudo firewall-cmd --state<\/code><\/pre>\n<\/li>\n
    3. Varsay\u0131lan b\u00f6lgeyi ayarlay\u0131n (genellikle ‘public’):\n
      sudo firewall-cmd --set-target=public<\/code><\/pre>\n<\/li>\n
    4. Belirli bir portu a\u00e7mak i\u00e7in:\n
      sudo firewall-cmd --zone=public --add-port=22\/tcp --permanent<\/code><\/pre>\n<\/li>\n
    5. De\u011fi\u015fikliklerin uygulanmas\u0131 i\u00e7in firewalld’yi yeniden y\u00fckleyin:\n
      sudo firewall-cmd --reload<\/code><\/pre>\n<\/li>\n<\/ol>\n
      UFW ve Firewalld ile \u0130lgili Kar\u015f\u0131la\u015ft\u0131rma Tablosu<\/h3>\n\n\n\n\n\n\n\n\n
      \u00d6zellik<\/th>\nUFW<\/th>\nFirewalld<\/th>\n<\/tr>\n<\/thead>\n
      Kullan\u0131m Kolayl\u0131\u011f\u0131<\/td>\nBasit ve kullan\u0131c\u0131 dostu<\/td>\nDaha karma\u015f\u0131k, ama esnek<\/td>\n<\/tr>\n
      Varsay\u0131lan Da\u011f\u0131t\u0131m<\/td>\nUbuntu<\/td>\nCentOS<\/td>\n<\/tr>\n
      Yap\u0131land\u0131rma<\/td>\nStatik kurallar<\/td>\nB\u00f6lge tabanl\u0131 dinamik kurallar<\/td>\n<\/tr>\n
      Komut Seti<\/td>\nBasit komutlar<\/td>\n\u00c7e\u015fitli komut se\u00e7enekleri<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
      Sonu\u00e7 olarak, hem UFW hem de Firewalld, Linux sunucular\u0131nda g\u00fcvenlik duvar\u0131 y\u00f6netimi i\u00e7in etkili ara\u00e7lard\u0131r. Hangi arac\u0131 se\u00e7ece\u011finiz, ihtiya\u00e7lar\u0131n\u0131za ve sunucunuzun yap\u0131land\u0131rmas\u0131na ba\u011fl\u0131d\u0131r. UFW, basit ve h\u0131zl\u0131 bir yap\u0131land\u0131rma arayanlar i\u00e7in idealken, Firewalld daha karma\u015f\u0131k ve dinamik y\u00f6netim gerektiren durumlar i\u00e7in uygundur. Her iki arac\u0131 da do\u011fru bir \u015fekilde yap\u0131land\u0131rmak, sunucunuzun g\u00fcvenli\u011fini art\u0131racak ve \u00e7e\u015fitli tehditlerden koruyacakt\u0131r.<\/p>\n
      UFW ve Firewalld Kullanarak Ubuntu ve CentOS Sunucular\u0131n\u0131z\u0131 G\u00fcvende Tutun<\/h2>\n
      Sunucu g\u00fcvenli\u011fi, veri koruma ve siber sald\u0131r\u0131lara kar\u015f\u0131 savunma a\u00e7\u0131s\u0131ndan kritik \u00f6neme sahiptir. Ubuntu ve CentOS gibi pop\u00fcler Linux da\u011f\u0131t\u0131mlar\u0131nda, sunucular\u0131n\u0131z\u0131 g\u00fcvenli hale getirmek i\u00e7in UFW (Uncomplicated Firewall) ve Firewalld gibi g\u00fc\u00e7l\u00fc g\u00fcvenlik duvar\u0131 ara\u00e7lar\u0131 mevcuttur. Bu yaz\u0131da, her iki sistemde g\u00fcvenlik duvarlar\u0131n\u0131n nas\u0131l yap\u0131land\u0131r\u0131laca\u011f\u0131na dair detayl\u0131 bilgiler sunaca\u011f\u0131z.<\/p>\n
      Ubuntu Sunucuda UFW ile G\u00fcvenlik Duvar\u0131 Nas\u0131l Yap\u0131land\u0131r\u0131l\u0131r?<\/h3>\n
      UFW, Ubuntu’da g\u00fcvenlik duvar\u0131 y\u00f6netimini basit ve anla\u015f\u0131l\u0131r hale getiren bir ara\u00e7t\u0131r. UFW’nin temel amac\u0131, sistem y\u00f6neticilerine karma\u015f\u0131k iptables komutlar\u0131 yerine daha anla\u015f\u0131l\u0131r bir aray\u00fcz sunmakt\u0131r. UFW’yi yap\u0131land\u0131rmak i\u00e7in a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 takip edebilirsiniz:<\/p>\n
        \n
      1. UFW’yi y\u00fckleyin (genellikle varsay\u0131lan olarak y\u00fckl\u00fcd\u00fcr): sudo apt install ufw<\/code><\/li>\n
      2. UFW’yi etkinle\u015ftirin: sudo ufw enable<\/code><\/li>\n
      3. Gerekli portlar\u0131 a\u00e7\u0131n. \u00d6rne\u011fin, SSH i\u00e7in 22 numaral\u0131 portu a\u00e7mak i\u00e7in: sudo ufw allow 22<\/code><\/li>\n
      4. Durumu kontrol edin: sudo ufw status<\/code><\/li>\n
      5. Gerekirse kurallar\u0131 de\u011fi\u015ftirin veya kald\u0131r\u0131n: sudo ufw delete allow 22<\/code><\/li>\n<\/ol>\n
        UFW ile ilgili olarak, a\u015fa\u011f\u0131daki tablo, yayg\u0131n olarak kullan\u0131lan baz\u0131 kurallar\u0131 ve bunlar\u0131n a\u00e7\u0131klamalar\u0131n\u0131 i\u00e7ermektedir:<\/p>\n\n\n\n\n\n\n\n\n
        Port<\/th>\nA\u00e7\u0131klama<\/th>\nKural<\/th>\n<\/tr>\n<\/thead>\n
        22<\/td>\nSSH Eri\u015fimi<\/td>\nsudo ufw allow 22<\/td>\n<\/tr>\n
        80<\/td>\nHTTP (Web) Eri\u015fimi<\/td>\nsudo ufw allow 80<\/td>\n<\/tr>\n
        443<\/td>\nHTTPS (G\u00fcvenli Web) Eri\u015fimi<\/td>\nsudo ufw allow 443<\/td>\n<\/tr>\n
        3306<\/td>\nMySQL Eri\u015fimi<\/td>\nsudo ufw allow from [IP_ADRES\u0130] to any port 3306<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
        CentOS Sunucuda Firewalld ile G\u00fcvenlik Duvar\u0131 Ayarlar\u0131 Nas\u0131l Yap\u0131l\u0131r?<\/h3>\n
        Firewalld, CentOS’ta dinamik g\u00fcvenlik duvar\u0131 y\u00f6netimi sa\u011flayan bir ara\u00e7t\u0131r. Bu sistem, a\u011f b\u00f6lgeleri ve hizmetler \u00fczerinde daha fazla kontrol imkan\u0131 sunar. Firewalld kullanarak g\u00fcvenlik duvar\u0131n\u0131z\u0131 yap\u0131land\u0131rmak i\u00e7in \u015fu ad\u0131mlar\u0131 izleyebilirsiniz:<\/p>\n
          \n
        1. Firewalld’yi y\u00fckleyin ve ba\u015flat\u0131n: sudo systemctl start firewalld<\/code><\/li>\n
        2. Firewalld’yi her zaman ba\u015flatmak i\u00e7in etkinle\u015ftirin: sudo systemctl enable firewalld<\/code><\/li>\n
        3. Durumu kontrol edin: sudo firewall-cmd --state<\/code><\/li>\n
        4. Gerekli portlar\u0131 a\u00e7\u0131n. \u00d6rne\u011fin, SSH i\u00e7in 22 numaral\u0131 portu a\u00e7mak i\u00e7in: sudo firewall-cmd --permanent --add-port=22\/tcp<\/code><\/li>\n
        5. A\u00e7\u0131lan portlar\u0131 uygulamak i\u00e7in ayarlar\u0131 yeniden y\u00fckleyin: sudo firewall-cmd --reload<\/code><\/li>\n<\/ol>\n
          Firewalld ile ilgili olarak, a\u015fa\u011f\u0131daki tablo, yayg\u0131n olarak kullan\u0131lan baz\u0131 hizmetleri ve bunlar\u0131n a\u00e7\u0131lmas\u0131 i\u00e7in gereken komutlar\u0131 i\u00e7ermektedir:<\/p>\n\n\n\n\n\n\n\n\n
          Hizmet<\/th>\nA\u00e7\u0131klama<\/th>\nKural<\/th>\n<\/tr>\n<\/thead>\n
          SSH<\/td>\nSunucuya uzaktan eri\u015fim<\/td>\nsudo firewall-cmd –permanent –add-service=ssh<\/td>\n<\/tr>\n
          HTTP<\/td>\nWeb sunucusu<\/td>\nsudo firewall-cmd –permanent –add-service=http<\/td>\n<\/tr>\n
          HTTPS<\/td>\nG\u00fcvenli web sunucusu<\/td>\nsudo firewall-cmd –permanent –add-service=https<\/td>\n<\/tr>\n
          MySQL<\/td>\nVeritaban\u0131 eri\u015fimi<\/td>\nsudo firewall-cmd –permanent –add-port=3306\/tcp<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
          Sonu\u00e7 olarak, UFW ve Firewalld ile Ubuntu ve CentOS sunucular\u0131n\u0131z\u0131 g\u00fcvenli bir \u015fekilde yap\u0131land\u0131rabilir ve koruyabilirsiniz. G\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 d\u00fczenli olarak g\u00f6zden ge\u00e7irmek ve g\u00fcncellemek, sunucunuzun g\u00fcvenli\u011fini art\u0131rmak i\u00e7in \u00f6nemlidir. Unutmay\u0131n ki, her zaman en iyi g\u00fcvenlik uygulamalar\u0131n\u0131 takip etmek, sunucular\u0131n\u0131z\u0131 tehditlere kar\u015f\u0131 koruman\u0131n en etkili yoludur.<\/p>\n
          Ubuntu ve CentOS \u0130\u00e7in UFW ve Firewalld G\u00fcvenlik Duvar\u0131 Yap\u0131land\u0131rma Ad\u0131mlar\u0131<\/h2>\n
          G\u00fcvenlik duvarlar\u0131, sunucular\u0131n ve a\u011flar\u0131n g\u00fcvenli\u011fini sa\u011flamak i\u00e7in kritik \u00f6neme sahiptir. Linux tabanl\u0131 sistemlerde, genellikle UFW (Uncomplicated Firewall) ve Firewalld gibi ara\u00e7lar kullan\u0131lmaktad\u0131r. Bu b\u00f6l\u00fcmde, Ubuntu ve CentOS \u00fczerinde bu iki g\u00fcvenlik duvar\u0131 arac\u0131n\u0131n nas\u0131l yap\u0131land\u0131r\u0131laca\u011f\u0131na ve sunucu g\u00fcvenli\u011finizi art\u0131rmak i\u00e7in nas\u0131l kullan\u0131laca\u011f\u0131na dair detayl\u0131 ad\u0131mlar sunulacakt\u0131r.<\/p>\n
          UFW (Uncomplicated Firewall) Yap\u0131land\u0131rmas\u0131 (Ubuntu)<\/h3>\n
          UFW, kullan\u0131c\u0131 dostu bir g\u00fcvenlik duvar\u0131 aray\u00fcz\u00fcd\u00fcr ve \u00f6zellikle Ubuntu kullan\u0131c\u0131lar\u0131 i\u00e7in idealdir. UFW’yi kurmak ve yap\u0131land\u0131rmak i\u00e7in a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 izleyebilirsiniz:<\/p>\n
            \n
          1. \n
              \n
            1. UFW’yi y\u00fckleyin (genellikle varsay\u0131lan olarak y\u00fckl\u00fcd\u00fcr):<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n
              sudo apt-get install ufw<\/code><\/pre>\n
                \n
              1. \n
                  \n
                1. UFW’yi etkinle\u015ftirin:<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n
                  sudo ufw enable<\/code><\/pre>\n
                    \n
                  1. \n
                      \n
                    1. Gelen ve giden trafi\u011fi kontrol etmek i\u00e7in kurallar ekleyin:<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n
                      sudo ufw allow 22\/tcp  # SSH i\u00e7in\r\nsudo ufw allow 80\/tcp  # HTTP i\u00e7in\r\nsudo ufw allow 443\/tcp  # HTTPS i\u00e7in<\/code><\/pre>\n
                        \n
                      1. \n
                          \n
                        1. UFW durumunu kontrol edin:<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n
                          sudo ufw status verbose<\/code><\/pre>\n
                          Firewalld Yap\u0131land\u0131rmas\u0131 (CentOS)<\/h3>\n
                          Firewalld, CentOS \u00fczerinde varsay\u0131lan olarak bulunan dinamik bir g\u00fcvenlik duvar\u0131d\u0131r. Firewalld’yi yap\u0131land\u0131rmak i\u00e7in a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 takip edebilirsiniz:<\/p>\n
                            \n
                          1. \n
                              \n
                            1. Firewalld’yi ba\u015flat\u0131n ve etkinle\u015ftirin:<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n
                              sudo systemctl start firewalld\r\nsudo systemctl enable firewalld<\/code><\/pre>\n
                                \n
                              1. \n
                                  \n
                                1. Gelen ba\u011flant\u0131lar i\u00e7in kural ekleyin:<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n
                                  sudo firewall-cmd --zone=public --add-service=ssh --permanent\r\nsudo firewall-cmd --zone=public --add-service=http --permanent\r\nsudo firewall-cmd --zone=public --add-service=https --permanent<\/code><\/pre>\n
                                    \n
                                  1. \n
                                      \n
                                    1. Yap\u0131land\u0131rmay\u0131 yeniden y\u00fckleyin:<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n
                                      sudo firewall-cmd --reload<\/code><\/pre>\n
                                        \n
                                      1. \n
                                          \n
                                        1. Firewalld durumunu kontrol edin:<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n
                                          sudo firewall-cmd --list-all<\/code><\/pre>\n
                                          UFW ve Firewalld Kullanarak Sunucu G\u00fcvenli\u011finizi Art\u0131r\u0131n<\/h3>\n
                                          UFW ve Firewalld, sunucu g\u00fcvenli\u011finizi art\u0131rman\u0131n etkili yollar\u0131d\u0131r. Bu ara\u00e7lar\u0131 kullanarak, yaln\u0131zca gerekli olan portlar\u0131 a\u00e7arak ve s\u00fcrekli g\u00fcncel tutarak g\u00fcvenlik seviyenizi art\u0131rabilirsiniz. Ayr\u0131ca, her iki ara\u00e7 da loglama \u00f6zellikleri sunarak, g\u00fcvenlik olaylar\u0131n\u0131 takip etmenize yard\u0131mc\u0131 olur.<\/p>\n
                                          A\u015fa\u011f\u0131daki tabloda, UFW ve Firewalld aras\u0131ndaki temel farklar ve benzerlikler g\u00f6sterilmektedir:<\/p>\n\n\n\n\n\n\n\n\n\n
                                          \u00d6zellik<\/th>\nUFW<\/th>\nFirewalld<\/th>\n<\/tr>\n<\/thead>\n
                                          Kullan\u0131m Kolayl\u0131\u011f\u0131<\/td>\nKullan\u0131c\u0131 dostu, basit komutlar<\/td>\nDaha fazla \u00f6zellik, daha karma\u015f\u0131k<\/td>\n<\/tr>\n
                                          Varsay\u0131lan Olarak Y\u00fckl\u00fc<\/td>\nUbuntu<\/td>\nCentOS<\/td>\n<\/tr>\n
                                          Kurallar\u0131n Y\u00f6netimi<\/td>\nStatik kurallar<\/td>\nDinamiktir, anl\u0131k olarak g\u00fcncellenebilir<\/td>\n<\/tr>\n
                                          Protokol Deste\u011fi<\/td>\nTCP\/UDP<\/td>\nTCP\/UDP, Rich Rules<\/td>\n<\/tr>\n
                                          G\u00fcnl\u00fckleme<\/td>\nMevcut<\/td>\nMevcut<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
                                          Sonu\u00e7 olarak, UFW ve Firewalld, Ubuntu ve CentOS sistemlerinde sunucu g\u00fcvenli\u011finizi art\u0131rmak i\u00e7in etkili ara\u00e7lard\u0131r. Do\u011fru yap\u0131land\u0131r\u0131ld\u0131klar\u0131nda, sunucular\u0131n\u0131z\u0131 d\u0131\u015f tehditlerden koruyacak g\u00fcvenli bir kalkan olu\u015ftururlar. Bu nedenle, her iki arac\u0131 da kullanarak sunucu g\u00fcvenli\u011finizi art\u0131rman\u0131z \u00f6nerilir.<\/p>\n    
                                          \r\n