{"id":546,"date":"2025-09-10T13:15:06","date_gmt":"2025-09-10T10:15:06","guid":{"rendered":"https:\/\/destek.narhost.com\/?p=546"},"modified":"2026-09-12T15:10:42","modified_gmt":"2026-09-12T12:10:42","slug":"sunucuza-iptables-ile-ping-atilmasini-engellemek","status":"publish","type":"post","link":"https:\/\/narhost.com\/destek\/sunucuza-iptables-ile-ping-atilmasini-engellemek\/","title":{"rendered":"Sunucuza IPTables ile Ping At\u0131lmas\u0131n\u0131 Engellemek"},"content":{"rendered":"<p class=\"kb-dogrulama\">Son do\u011frulama: Eyl\u00fcl 2026 \u00b7 Ubuntu 24.04 test sunucusunda denendi (kal\u0131c\u0131 kay\u0131t ad\u0131m\u0131 resmi pakete g\u00f6re, sunucuda kaydedilmedi)<\/p>\n<div id=\"hizli-cozum\" class=\"ai-box ai-box--cozum\">\n<p class=\"ai-box-title\">H\u0131zl\u0131 \u00e7\u00f6z\u00fcm<\/p>\n<p><strong>IPTables ping engelleme<\/strong> kural\u0131 tek sat\u0131rla eklenir: <code>iptables -A INPUT -p icmp --icmp-type echo-request -j DROP<\/code> komutu sunucunuza gelen ICMP echo-request (ping) paketlerini INPUT zincirinde sessizce d\u00fc\u015f\u00fcr\u00fcr.<\/p>\n<ol>\n<li>Mevcut INPUT kurallar\u0131na bak\u0131n: <code>iptables -L INPUT -n --line-numbers<\/code>.<\/li>\n<li>DROP kural\u0131n\u0131 ekleyin: <code>iptables -A INPUT -p icmp --icmp-type echo-request -j DROP<\/code>.<\/li>\n<li><code>iptables -L -n<\/code> ile kural\u0131n eklendi\u011fini, ard\u0131ndan bir ping testiyle paketlerin d\u00fc\u015ft\u00fc\u011f\u00fcn\u00fc do\u011frulay\u0131n.<\/li>\n<\/ol>\n<\/div>\n<table class=\"kb-uyg\">\n<tr>\n<th>Panel<\/th>\n<td>Yok \u2014 komut sat\u0131r\u0131ndan (SSH veya konsol)<\/td>\n<\/tr>\n<tr>\n<th>Sistem<\/th>\n<td>VPS\/VDS: Ubuntu, Debian, AlmaLinux, Rocky Linux<\/td>\n<\/tr>\n<tr>\n<th>Yetki<\/th>\n<td>root veya sudo yetkili kullan\u0131c\u0131<\/td>\n<\/tr>\n<tr>\n<th>Narhost \u00fcr\u00fcn\u00fc<\/th>\n<td><a href=\"https:\/\/narhost.com\/vps-sunucu\" title=\"VPS Sunucu - Narhost\">VPS Sunucu<\/a><\/td>\n<\/tr>\n<\/table>\n<div class=\"kb-once\">\n<p class=\"label\">Ba\u015flamadan \u00f6nce<\/p>\n<ul>\n<li>Sunucunuza <strong>root veya sudo yetkili bir kullan\u0131c\u0131yla<\/strong> ba\u011flanabiliyor olmal\u0131s\u0131n\u0131z; SSH yan\u0131t vermiyorsa <a href=\"https:\/\/narhost.com\/destek\/konsol-baglantisi-ile-sunucuya-nasil-erisilir\/\" title=\"Konsol ba\u011flant\u0131s\u0131 ile sunucuya nas\u0131l eri\u015filir - Narhost Destek\">konsol ba\u011flant\u0131s\u0131n\u0131<\/a> kullan\u0131n.<\/li>\n<li>Mevcut kurallar\u0131 <code>iptables -L -n<\/code> ile not edin; bu kart yaln\u0131zca ICMP (ping) trafi\u011fini hedefler, SSH dahil ba\u015fka bir port veya protokol\u00fc etkilemez.<\/li>\n<li>Sunucunuzda ufw ya da firewalld etkinse ekledi\u011finiz kural bir sonraki servis yeniden ba\u015flatmas\u0131nda ya da kural yenilemesinde kaybolabilir; kal\u0131c\u0131l\u0131k ad\u0131m\u0131n\u0131 atlamay\u0131n.<\/li>\n<li>Harici bir izleme (uptime monitoring) servisiniz varsa ping tabanl\u0131 kontrol kullan\u0131p kullanmad\u0131\u011f\u0131n\u0131 kontrol edin.<\/li>\n<\/ul>\n<\/div>\n<h2>IPTables ping engelleme ne i\u015fe yarar, ne zaman gerekir<\/h2>\n<p>Ping, ICMP echo-request\/echo-reply paketleriyle \u00e7al\u0131\u015f\u0131r; sunucunuz varsay\u0131lan olarak bu isteklere yan\u0131t verir. IPTables ping engelleme kural\u0131, gelen echo-request paketlerini INPUT zincirinde <code>DROP<\/code> ederek sunucunun ping isteklerine hi\u00e7 yan\u0131t vermemesini sa\u011flar. Bunu genellikle iki nedenle uygulars\u0131n\u0131z: sunucunuzun a\u011fda &#8220;g\u00f6r\u00fcnmez&#8221; kalmas\u0131n\u0131 istedi\u011finizde ya da ICMP tabanl\u0131 yo\u011fun istek trafi\u011finin sunucu kaynaklar\u0131n\u0131 me\u015fgul etmesini azaltmak istedi\u011finizde. Kural yaln\u0131zca ICMP protokol\u00fcn\u00fc kapsar; TCP\/UDP \u00fczerinden \u00e7al\u0131\u015fan di\u011fer servisleri (web, SSH, veritaban\u0131) etkilemez ve tek ba\u015f\u0131na kapsaml\u0131 bir sald\u0131r\u0131 \u00f6nleme \u00e7\u00f6z\u00fcm\u00fc de\u011fildir.<\/p>\n<div class=\"warn-box\">\n<p class=\"label\">Dikkat<\/p>\n<p>Kural\u0131 ekledikten sonra sunucunuz d\u0131\u015far\u0131dan ping&#8217;e yan\u0131t vermez. Ping tabanl\u0131 bir uptime izleme arac\u0131 kullan\u0131yorsan\u0131z bu ara\u00e7 sunucuyu &#8220;kapal\u0131&#8221; olarak i\u015faretleyebilir; izleme y\u00f6nteminizi HTTP\/TCP tabanl\u0131 bir kontrole ge\u00e7irmeniz gerekir.<\/p>\n<\/div>\n<figure class=\"nh-sema\"><img src=\"https:\/\/narhost.com\/destek\/wp-content\/uploads\/2026\/09\/sunucuza-iptables-ile-ping-atilmasini-engellemek-sema-narhost.webp\" alt=\"iptables ping engelleme ak\u0131\u015f \u015femas\u0131 \u2014 mevcut kurallar\u0131 g\u00f6r\u00fcnt\u00fcleme, DROP kural\u0131 ekleme, do\u011frulama ve ping testi ad\u0131mlar\u0131\" width=\"1200\" height=\"500\" loading=\"lazy\" decoding=\"async\"><figcaption>Kural eklemeden teste d\u00f6rt ad\u0131m: mevcut durumu g\u00f6r, DROP ekle, do\u011frula, test et.<\/figcaption><\/figure>\n<h2>Ad\u0131m ad\u0131m IPTables ping engelleme<\/h2>\n<ol class=\"kb-adimlar\">\n<li><strong>Mevcut INPUT kurallar\u0131n\u0131 g\u00f6r\u00fcnt\u00fcleyin:<\/strong>\n<pre><code class=\"language-bash\">iptables -L INPUT -n --line-numbers<\/code><\/pre>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: test sunucusunda kural tan\u0131ml\u0131 de\u011fildi, \u00e7\u0131kt\u0131 yaln\u0131zca <code>Chain INPUT (policy ACCEPT)<\/code> ba\u015fl\u0131\u011f\u0131n\u0131 g\u00f6sterdi.<\/p>\n<\/li>\n<li><strong>DROP kural\u0131n\u0131 ekleyin:<\/strong>\n<pre><code class=\"language-bash\">iptables -A INPUT -p icmp --icmp-type echo-request -j DROP<\/code><\/pre>\n<\/li>\n<li><strong>Kural\u0131n eklendi\u011fini do\u011frulay\u0131n:<\/strong>\n<pre><code class=\"language-bash\">iptables -L INPUT -n --line-numbers<\/code><\/pre>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: test sunucusunda <code>1 DROP 1 -- 0.0.0.0\/0 0.0.0.0\/0 icmptype 8<\/code> sat\u0131r\u0131 g\u00f6r\u00fcnd\u00fc (icmptype 8 = echo-request).<\/p>\n<\/li>\n<li><strong>Ping ile test edin:<\/strong>\n<pre><code class=\"language-bash\">ping -c 3 -W 2 127.0.0.1<\/code><\/pre>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: test sunucusunda kural etkinken <code>3 packets transmitted, 0 received, 100% packet loss<\/code> d\u00f6nd\u00fc; kural yokken ayn\u0131 komut normal yan\u0131t verir.<\/p>\n<\/li>\n<\/ol>\n<h3>Kural\u0131 kal\u0131c\u0131 hale getirme (opsiyonel)<\/h3>\n<p>Sunucu yeniden ba\u015flad\u0131\u011f\u0131nda iptables kurallar\u0131 s\u0131f\u0131rlan\u0131r. Ubuntu ve Debian&#8217;da <code>iptables-persistent<\/code> paketi kurulumu s\u0131ras\u0131nda mevcut kurallar\u0131 kaydetmenizi sorar; <a href=\"https:\/\/manpages.ubuntu.com\/manpages\/noble\/man8\/netfilter-persistent.8.html\" title=\"netfilter-persistent man sayfas\u0131 (Ubuntu resmi dok\u00fcman)\" target=\"_blank\" rel=\"noopener\">Ubuntu&#8217;nun resmi <code>netfilter-persistent<\/code> dok\u00fcman\u0131na g\u00f6re<\/a> paket kurulduktan sonra <code>netfilter-persistent save<\/code> komutu kurallar\u0131 <code>\/etc\/iptables\/<\/code> alt\u0131na yazar. AlmaLinux 9 ve Rocky Linux 9&#8217;da varsay\u0131lan g\u00fcvenlik duvar\u0131 firewalld&#8217;d\u0131r; ayn\u0131 sonucu almak i\u00e7in do\u011frudan iptables yerine <a href=\"https:\/\/firewalld.org\/documentation\/\" title=\"firewalld resmi dok\u00fcmantasyonu\" target=\"_blank\" rel=\"noopener\">firewalld&#8217;\u0131n resmi dok\u00fcman\u0131ndaki<\/a> kal\u0131c\u0131 rich rule y\u00f6ntemi kullan\u0131l\u0131r, bu da ayr\u0131 bir kart konusudur.<\/p>\n<h2>Do\u011frulama<\/h2>\n<div class=\"success-box\">\n<p class=\"label\">Sonu\u00e7<\/p>\n<p><code>iptables -L INPUT -n<\/code> \u00e7\u0131kt\u0131s\u0131nda <code>DROP<\/code> sat\u0131r\u0131n\u0131 g\u00f6r\u00fcyor ve sunucuya d\u0131\u015far\u0131dan at\u0131lan ping isteklerine yan\u0131t gelmiyorsa kural aktiftir. Test sunucusunda kural eklenince ping paketlerinin tamam\u0131 d\u00fc\u015ft\u00fc, kural <code>-D<\/code> ile kald\u0131r\u0131l\u0131nca ping normale d\u00f6nd\u00fc.<\/p>\n<\/div>\n<h2>H\u00e2l\u00e2 \u00e7\u00f6z\u00fclmediyse<\/h2>\n<ul>\n<li><strong>Kural yeniden ba\u015flatmadan sonra kayboluyor.<\/strong> Kal\u0131c\u0131l\u0131k ad\u0131m\u0131n\u0131 atlam\u0131\u015fs\u0131n\u0131zd\u0131r; yukar\u0131daki <code>netfilter-persistent<\/code> ya da firewalld ad\u0131m\u0131n\u0131 uygulay\u0131n.<\/li>\n<li><strong>Sunucu h\u00e2l\u00e2 ping&#8217;e yan\u0131t veriyor.<\/strong> ufw ya da firewalld etkinse kendi kural setini iptables&#8217;\u0131n \u00f6n\u00fcne yaz\u0131yor olabilir; <a href=\"https:\/\/narhost.com\/destek\/centos-6-guvenlik-duvari-kapatma\/\" title=\"Sunucuda g\u00fcvenlik duvar\u0131 ayarlar\u0131 - Narhost Destek\">g\u00fcvenlik duvar\u0131 ayarlar\u0131<\/a> kart\u0131ndan hangi servisin etkin oldu\u011funu kontrol edin.<\/li>\n<li><strong>Ping atam\u0131yorsunuz, engellemek de\u011fil sorun bu.<\/strong> Amac\u0131n\u0131z ping engellemek de\u011fil ping sorununu \u00e7\u00f6zmekse <a href=\"https:\/\/narhost.com\/destek\/sunucuya-ping-atilamiyorsa-ne-yapilmali\/\" title=\"Sunucuya ping at\u0131lam\u0131yorsa ne yap\u0131lmal\u0131 - Narhost Destek\">sunucuya ping at\u0131lam\u0131yorsa ne yap\u0131lmal\u0131<\/a> kart\u0131na bak\u0131n.<\/li>\n<li><strong>SSH ile ba\u011flanam\u0131yorsunuz.<\/strong><a href=\"https:\/\/narhost.com\/destek\/sunucuya-ssh-ile-nasil-baglanilir\/\" title=\"Sunucuya SSH ile nas\u0131l ba\u011flan\u0131l\u0131r - Narhost Destek\">SSH ile ba\u011flanma<\/a> kart\u0131ndaki ad\u0131mlar\u0131 izleyin; bu kart SSH portuna dokunmaz.<\/li>\n<\/ul>\n<div class=\"cta-box\">\n<p class=\"label\">Narhost deste\u011fi<\/p>\n<p>Kural\u0131 uygulad\u0131ktan sonra beklenmedik bir eri\u015fim sorunu ya\u015farsan\u0131z destek talebinize sunucunuzun IP adresini, \u00e7al\u0131\u015ft\u0131rd\u0131\u011f\u0131n\u0131z <code>iptables<\/code> komutlar\u0131n\u0131 ve <code>iptables -L -n<\/code> \u00e7\u0131kt\u0131s\u0131n\u0131 ekleyin.<\/p>\n<p><a class=\"cta-btn\" href=\"https:\/\/narhost.com\/submitticket.php\" title=\"Narhost destek talebi a\u00e7\">Destek talebi a\u00e7<\/a><\/div>\n<div class=\"kb-ilgili\">\n<p class=\"label\">Sonraki ad\u0131mlar<\/p>\n<ul>\n<li><a href=\"https:\/\/narhost.com\/destek\/vps-vds-ilk-kurulum-rehberi\/\" title=\"VPS VDS Sunucu \u0130lk Kurulum Rehberi - Narhost Destek\">VPS VDS Sunucu \u0130lk Kurulum Rehberi<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/sunucuya-ping-atilamiyorsa-ne-yapilmali\/\" title=\"Sunucuya ping at\u0131lam\u0131yorsa ne yap\u0131lmal\u0131 - Narhost Destek\">Sunucuya ping at\u0131lam\u0131yorsa ne yap\u0131lmal\u0131<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/centos-6-guvenlik-duvari-kapatma\/\" title=\"Sunucuda g\u00fcvenlik duvar\u0131 ayarlar\u0131 - Narhost Destek\">Sunucuda g\u00fcvenlik duvar\u0131 ayarlar\u0131<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/sunucuya-ssh-ile-nasil-baglanilir\/\" title=\"Sunucuya SSH ile nas\u0131l ba\u011flan\u0131l\u0131r - Narhost Destek\">Sunucuya SSH ile nas\u0131l ba\u011flan\u0131l\u0131r<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/linux-ping-zaman-asimi-suresini-belirleme\/\" title=\"Linux ping zaman a\u015f\u0131m\u0131 s\u00fcresini belirleme - Narhost Destek\">Linux ping zaman a\u015f\u0131m\u0131 s\u00fcresini belirleme<\/a><\/li>\n<\/ul>\n<\/div>\n<div class=\"kb-faq\">\n<h2>S\u0131k\u00e7a sorulan sorular<\/h2>\n<h3>IPTables ping engelleme kural\u0131 kal\u0131c\u0131 m\u0131 kal\u0131r?<\/h3>\n<p>Hay\u0131r, sunucu yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda iptables kurallar\u0131 s\u0131f\u0131rlan\u0131r. Kal\u0131c\u0131 olmas\u0131n\u0131 istiyorsan\u0131z Ubuntu\/Debian&#8217;da <code>netfilter-persistent<\/code>, AlmaLinux\/Rocky&#8217;de firewalld&#8217;\u0131n kal\u0131c\u0131 kural y\u00f6ntemini kullanman\u0131z gerekir.<\/p>\n<h3>Bu kural sunucumu DDoS sald\u0131r\u0131lar\u0131ndan korur mu?<\/h3>\n<p>Hay\u0131r. Kural yaln\u0131zca ICMP echo-request paketlerini d\u00fc\u015f\u00fcr\u00fcr; TCP\/UDP \u00fczerinden gelen yo\u011fun istek trafi\u011fini etkilemez, tek ba\u015f\u0131na kapsaml\u0131 bir savunma say\u0131lmaz.<\/p>\n<h3>Kural\u0131 geri almak istersem ne yapmal\u0131y\u0131m?<\/h3>\n<p>Ayn\u0131 kural\u0131 <code>-A<\/code> yerine <code>-D<\/code> ile \u00e7al\u0131\u015ft\u0131rman\u0131z yeterli: <code>iptables -D INPUT -p icmp --icmp-type echo-request -j DROP<\/code>. Test sunucusunda bu komuttan hemen sonra ping normale d\u00f6nd\u00fc.<\/p>\n<h3>Yaln\u0131zca belirli bir IP adresinden gelen ping&#8217;i engelleyebilir miyim?<\/h3>\n<p>Evet, kurala kaynak adresi ekleyerek: <code>iptables -A INPUT -s 203.0.113.10 -p icmp --icmp-type echo-request -j DROP<\/code>. Kaynak (<code>-s<\/code>) belirtilmezse kural t\u00fcm kaynaklardan gelen ping&#8217;i kapsar.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>IPTables ping engelleme kural\u0131 iptables -A INPUT -p icmp &#8211;icmp-type echo-request -j DROP komutuyla eklenir; do\u011frulama, kal\u0131c\u0131 kay\u0131t ve geri alma ad\u0131mlar\u0131yla birlikte.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12,13],"tags":[233,236],"class_list":["post-546","post","type-post","status-publish","format-standard","hentry","category-vds-server","category-vps-server","tag-guvenlik-duvari","tag-iptables"],"meta_box":[],"_links":{"self":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/546","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/comments?post=546"}],"version-history":[{"count":2,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/546\/revisions"}],"predecessor-version":[{"id":732,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/546\/revisions\/732"}],"wp:attachment":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/media?parent=546"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/categories?post=546"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/tags?post=546"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}