{"id":10856,"date":"2026-11-06T21:23:30","date_gmt":"2026-11-06T21:23:30","guid":{"rendered":"https:\/\/verisunucu.net\/blog\/?p=10856"},"modified":"2026-11-08T21:36:17","modified_gmt":"2026-11-08T21:36:17","slug":"uzak-masaustu-ip-izin-verme-engelleme","status":"publish","type":"post","link":"https:\/\/verisunucu.net\/blog\/uzak-masaustu-ip-izin-verme-engelleme\/","title":{"rendered":"Uzak Masa\u00fcst\u00fc IP \u0130zin Verme\/Engelleme"},"content":{"rendered":"

Windows tabanl\u0131 bir sunucuyu (VDS veya VPS) y\u00f6netirken kullan\u0131lan en yayg\u0131n, pratik ve performansl\u0131 y\u00f6ntemlerden biri Uzak Masa\u00fcst\u00fc Ba\u011flant\u0131s\u0131 (RDP – Remote Desktop Protocol)<\/b> protokol\u00fcd\u00fcr. Varsay\u0131lan olarak 3389 numaral\u0131 port<\/b> \u00fczerinden hizmet veren RDP servisi, sunucunuza d\u00fcnyan\u0131n her yerinden grafik aray\u00fcz\u00fc ile eri\u015fmenizi sa\u011flar. Ancak bu portun do\u011frudan t\u00fcm internet trafi\u011fine a\u00e7\u0131k olmas\u0131, sunucunuzu otomatik siber tapt\u0131rma botlar\u0131n\u0131n, kaba kuvvet (brute-force) \u015fifre deneme sald\u0131r\u0131lar\u0131n\u0131n ve fidye yaz\u0131l\u0131m\u0131 (ransomware) tehditlerinin bir numaral\u0131 hedefi haline getirir.<\/p>\n

Sunucu g\u00fcvenli\u011finizi en \u00fcst d\u00fczeye \u00e7\u0131karman\u0131n, gereksiz i\u015flemci\/a\u011f y\u00fck\u00fcn\u00fc engellemenin ve yetkisiz eri\u015fim risklerini s\u0131f\u0131ra indirmenin en etkili yolu, RDP portuna sadece belirli IP adreslerinin eri\u015fmesine izin vermek (White-listing<\/b>) veya zararl\u0131 aktiviteler g\u00f6steren IP adreslerini engellemektir (Black-listing<\/b>).<\/p>\n

Verisunucu.net<\/b><\/a> olarak haz\u0131rlad\u0131\u011f\u0131m\u0131z bu detayl\u0131 rehberde; Windows Server sistemlerde Windows Defender G\u00fcvenlik Duvar\u0131 (Geli\u015fmi\u015f G\u00fcvenlik \u00d6zellikli Windows Firewall) kullanarak IP bazl\u0131 eri\u015fim kurallar\u0131n\u0131n ad\u0131m ad\u0131m nas\u0131l yap\u0131land\u0131r\u0131laca\u011f\u0131n\u0131 t\u00fcm detaylar\u0131yla inceliyoruz.<\/p>\n

\"Uzak — Uzak Masa\u00fcst\u00fc IP \u0130zin Verme\/Engelleme<\/figcaption><\/figure>\n
1. Y\u00f6ntem: Sadece Belirli IP Adreslerine RDP \u0130zni Verme (En G\u00fcvenli Yakla\u015f\u0131m)<\/h2>\n
E\u011fer sunucunuza sadece kendi evinizden, ofisinizden veya \u015firketinizin sabit IP (Statik IP) adresi \u00fczerinden ba\u011flan\u0131yorsan\u0131z, RDP portunu (3389) d\u0131\u015f d\u00fcnyaya tamamen kapat\u0131p **sadece izin verdi\u011finiz IP adreslerine<\/b> a\u00e7mak en profesyonel g\u00fcvenlik \u00f6nlemidir.<\/p>\n**
**Ad\u0131m Ad\u0131m Yap\u0131land\u0131rma Rehberi:<\/h3>\n**\n
\n
Uzak Masa\u00fcst\u00fc (RDP) ba\u011flant\u0131s\u0131 ile sunucunuza y\u00f6netici (Administrator) yetkileriyle giri\u015f yap\u0131n.<\/p>\n<\/li>\n
\n
Klavyenizden `Windows + R<\/code> tu\u015f kombinasyonuna basarak \u00c7al\u0131\u015ft\u0131r (Run)<\/b> penceresini a\u00e7\u0131n.<\/p>\n<\/li>\n`
`\nA\u00e7\u0131lan kutucu\u011fa wf.msc<\/code><\/b> yaz\u0131n ve ENTER<\/code> tu\u015funa bas\u0131n (Bu i\u015flem Geli\u015fmi\u015f G\u00fcvenlik \u00d6zellikli Windows Defender G\u00fcvenlik Duvar\u0131<\/i> panelini a\u00e7acakt\u0131r).<\/p>\n<\/li>\n`
`\nSol taraftaki gezinti men\u00fcs\u00fcnden Gelen Kurallar\u0131 (Inbound Rules)<\/b> se\u00e7ene\u011fine t\u0131klay\u0131n.<\/p>\n<\/li>\n`
`\nOrta alanda s\u0131ralanan kurallar aras\u0131nda RDP servisine ait kurallar\u0131 bulun. Varsay\u0131lan sistemlerde bu kurallar genellikle \u015fu adlarla g\u00f6r\u00fcn\u00fcr:<\/p>\n`\n\nUzak Masa\u00fcst\u00fc – Kullan\u0131c\u0131 Modu (TCP-In)<\/b> \/ Remote Desktop – User Mode (TCP-In)<\/i><\/p>\n<\/li>\n \nUzak Masa\u00fcst\u00fc – Kullan\u0131c\u0131 Modu (UDP-In)<\/b> \/ Remote Desktop – User Mode (UDP-In)<\/i><\/p>\n<\/li>\n<\/ul>\n<\/li>\n \nD\u00fczenlemek istedi\u011finiz kurala (\u00d6zellikle TCP-In kural\u0131na) \u00e7ift t\u0131klay\u0131n veya sa\u011f t\u0131klay\u0131p \u00d6zellikler (Properties)<\/b> se\u00e7ene\u011fine girin.<\/p>\n<\/li>\n \nA\u00e7\u0131lan pencerenin \u00fcst men\u00fcs\u00fcnden Kapsam (Scope)<\/b> sekmesine ge\u00e7in.<\/p>\n<\/li>\n\nKapsam sekmesinde Uzaktan IP adresi (Remote IP address)<\/b> b\u00f6l\u00fcm\u00fcn\u00fc bulun:<\/p>\n\n\nVarsay\u0131lan olarak “Herhangi bir IP adresi” (Any IP address) se\u00e7ene\u011fi aktiftir.<\/p>\n<\/li>\n \nBuradan “Bu IP adresleri” (These IP addresses)<\/b> se\u00e7ene\u011fini i\u015faretleyin.<\/p>\n<\/li>\n \nSa\u011f tarafta bulunan Ekle… (Add…)<\/b> butonuna t\u0131klay\u0131n.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n \nA\u00e7\u0131lan pencerede eri\u015fim izni vermek istedi\u011finiz sabit IP adresini (\u00d6rn: 185.123.45.67<\/code>) veya bir IP blo\u011funu\/alt a\u011f\u0131n\u0131 (\u00d6rn: 185.123.45.0\/24<\/code>) girin ve Tamam<\/b> butonuna bas\u0131n.<\/p>\n<\/li>\n \nS\u0131ras\u0131yla Uygula<\/b> ve Tamam<\/b> butonlar\u0131na basarak pencereyi kapat\u0131n.<\/p>\n<\/li>\n\u00d6nemli Test Ad\u0131m\u0131:<\/b> Ayarlar\u0131 yapt\u0131ktan sonra mevcut oturumunuzu kapatmadan, farkl\u0131 bir internet a\u011f\u0131 veya mobil veri \u00fczerinden sunucuya ba\u011flanmay\u0131 deneyin. Ba\u011flant\u0131n\u0131n reddedildi\u011fini; izin verdi\u011finiz sabit IP \u00fczerinden ise sorunsuz ba\u011fland\u0131\u011f\u0131n\u0131z\u0131 teyit edin.<\/li>\n<\/ol>\nUzak Masa\u00fcst\u00fc IP \u0130zin Verme\/Engelleme<\/figcaption><\/figure>\n2. Y\u00f6ntem: Belirli Sald\u0131rgan IP Adreslerini veya Bloklar\u0131n\u0131 Engelleme<\/h2>\nSunucunuzun sistem g\u00fcnl\u00fcklerinde (Event Viewer) s\u00fcrekli ba\u015far\u0131s\u0131z oturum a\u00e7ma denemeleri yapan belirli bir IP adresi veya IP aral\u0131\u011f\u0131 tespit ettiyseniz, bu IP’leri g\u00fcvenlik duvar\u0131 \u00fczerinden tamamen engelleyebilirsiniz.<\/p>\n Ad\u0131m Ad\u0131m Kural Olu\u015fturma:<\/h3>\n\n\nWindows + R<\/code> tu\u015flar\u0131na bas\u0131p wf.msc<\/code><\/b> yazarak g\u00fcvenlik duvar\u0131 panelini a\u00e7\u0131n.<\/p>\n<\/li>\n \nSol men\u00fcde yer alan Gelen Kurallar\u0131 (Inbound Rules)<\/b> simgesine sa\u011f t\u0131klay\u0131n ve Yeni Kural… (New Rule…)<\/b> se\u00e7ene\u011fini t\u0131klay\u0131n.<\/p>\n<\/li>\n \nKural T\u00fcr\u00fc (Rule Type)<\/b> ekran\u0131nda \u00d6zel (Custom)<\/b> se\u00e7ene\u011fini i\u015faretleyin ve \u0130leri<\/i> tu\u015funa bas\u0131n.<\/p>\n<\/li>\n \nProgram<\/b> ekran\u0131nda T\u00fcm programlar (All programs)<\/b> se\u00e7ene\u011fini se\u00e7ili b\u0131rak\u0131p \u0130leri<\/i> ile devam edin.<\/p>\n<\/li>\n \nProtokol ve Ba\u011flant\u0131 Noktalar\u0131 (Protocol and Ports)<\/b> ekran\u0131nda:<\/p>\n \n\nProtokol t\u00fcr\u00fc:<\/b> TCP<\/code><\/p>\n<\/li>\n \nYerel ba\u011flant\u0131 noktas\u0131:<\/b> Belirli ba\u011flant\u0131 noktalar\u0131<\/code> (Specific ports) se\u00e7ene\u011fini i\u015faretleyin ve kutucu\u011fa 3389<\/code> yaz\u0131n.<\/p>\n<\/li>\n \nUzaktan ba\u011flant\u0131 noktas\u0131:<\/b> T\u00fcm ba\u011flant\u0131 noktalar\u0131<\/code> (All ports) olarak b\u0131rak\u0131n ve \u0130leri<\/i> deyin.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n \nKapsam (Scope)<\/b> ekran\u0131nda:<\/p>\n \n\n“Bu kural hangi uzaktan IP adresleri i\u00e7in ge\u00e7erli?” ba\u015fl\u0131\u011f\u0131 alt\u0131nda Bu IP adresleri (These IP addresses)<\/b> se\u00e7ene\u011fini i\u015faretleyin.<\/p>\n<\/li>\n \nEkle…<\/b> butonuna basarak engellemek istedi\u011finiz \u015f\u00fcpheli IP adresini veya IP bloklar\u0131n\u0131 listeye dahil edin.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n \nEylem (Action)<\/b> ekran\u0131nda Ba\u011flant\u0131y\u0131 engelle (Block the connection)<\/b> se\u00e7ene\u011fini i\u015faretleyin ve \u0130leri<\/i> deyin.<\/p>\n<\/li>\n \nProfil (Profile)<\/b> ekran\u0131nda kural\u0131n hangi a\u011f profillerinde (Domain, Private, Public) ge\u00e7erli olaca\u011f\u0131n\u0131 se\u00e7in (Hepsini i\u015faretli b\u0131rakman\u0131z \u00f6nerilir).<\/p>\n<\/li>\n \nAd (Name)<\/b> ekran\u0131nda kurala a\u00e7\u0131klay\u0131c\u0131 bir isim verin (\u00d6rn: RDP Sald\u0131rgan IP Engelleme<\/i>) ve Son (Finish)<\/b> butonuna basarak kural\u0131 aktif edin.<\/p>\n<\/li>\n<\/ol>\n RDP G\u00fcvenli\u011fini Art\u0131rmak \u0130\u00e7in Ekstra Tavsiyeler<\/h2>\nIP k\u0131s\u0131tlamas\u0131 uygulaman\u0131n yan\u0131 s\u0131ra sunucu g\u00fcvenli\u011finizi sa\u011flamla\u015ft\u0131racak di\u011fer kritik ad\u0131mlar \u015funlard\u0131r:<\/p>\n \n\nVarsay\u0131lan RDP Portunu (3389) De\u011fi\u015ftirin:<\/b> Kay\u0131t defteri (Registry) \u00fczerinden 3389 olan port numaras\u0131n\u0131 tahmin edilmesi zor rastgele bir porta \u00e7ekerek otomatik tarama botlar\u0131n\u0131n hedefi olmaktan kurtulabilirsiniz.<\/p>\n<\/li>\n \n\u015eifre Karma\u015f\u0131kl\u0131\u011f\u0131 ve Hesap Kilitleme Politikas\u0131:<\/b> Administrator ve t\u00fcm alt kullan\u0131c\u0131 hesaplar\u0131nda b\u00fcy\u00fck-k\u00fc\u00e7\u00fck harf, rakam ve \u00f6zel karakter i\u00e7eren en az 12 haneli g\u00fc\u00e7l\u00fc \u015fifreler belirleyin. Ayr\u0131ca belirli say\u0131da hatal\u0131 denemeden sonra hesab\u0131 ge\u00e7ici kilitleyen politikalar\u0131 aktif edin.<\/p>\n<\/li>\n \nNetwork Level Authentication (NLA) Kullan\u0131m\u0131:<\/b> Oturum a\u00e7ma ekran\u0131 y\u00fcklenmeden \u00f6nce kullan\u0131c\u0131n\u0131n kimlik do\u011frulamas\u0131n\u0131 zorunlu k\u0131lan NLA (A\u011f D\u00fczeyinde Kimlik Do\u011frulama) \u00f6zelli\u011fini aktif tutun.<\/p>\n<\/li>\n<\/ul>\n S\u0131k\u00e7a Sorulan Sorular<\/h2>\nYanl\u0131\u015fl\u0131kla kendi IP adresimi engellersem sunucuya yeniden nas\u0131l ba\u011flanabilirim?<\/b> E\u011fer yanl\u0131\u015f bir kural olu\u015fturup kendi eri\u015fiminizi keserseniz, pani\u011fe kap\u0131lman\u0131za gerek yoktur. Sunucu sa\u011flay\u0131c\u0131n\u0131z\u0131n m\u00fc\u015fteri panelinde bulunan VNC Konsol (Web Console \/ OOB)<\/b> \u00f6zelli\u011fini kullanarak do\u011frudan taray\u0131c\u0131 \u00fczerinden sunucunuzun ekran\u0131na eri\u015febilir ve hatal\u0131 kural\u0131 silebilirsiniz.<\/p>\n Dinamik (De\u011fi\u015fken) IP adresi kullan\u0131yorsam bu y\u00f6ntemi nas\u0131l uygulayabilirim?<\/b> E\u011fer ev internetiniz statik de\u011filse ve modemi her kapat\u0131p a\u00e7t\u0131\u011f\u0131n\u0131zda IP adresiniz de\u011fi\u015fiyorsa, tek bir IP adresi yerine servis sa\u011flay\u0131c\u0131n\u0131z\u0131n IP blo\u011funu (Subnet) izinli listeye ekleyebilir ya da sunucuya ba\u011flanmadan \u00f6nce bir VPN\/Bastion Server altyap\u0131s\u0131 kullanabilirsiniz.<\/p>\n G\u00fcvenli ve Kesintisiz Sunucu Altyap\u0131s\u0131 \u0130\u00e7in: Verisunucu.net<\/h2>\nProjelerinizde en \u00fcst d\u00fczey g\u00fcvenlik \u00f6nlemlerini esnek bir \u015fekilde uygulayabilece\u011finiz, tam yetkili ve y\u00fcksek performansl\u0131 bir sunucu altyap\u0131s\u0131na ihtiyac\u0131n\u0131z vard\u0131r. %100 NVMe SSD disk mimarisi, y\u00fcksek h\u0131zl\u0131 network hatlar\u0131 ve tam Administrator\/root eri\u015fim \u00f6zg\u00fcrl\u00fc\u011f\u00fc sunan Vds sat\u0131n al<\/a><\/b> paketlerimizle sunucular\u0131n\u0131z\u0131 diledi\u011finiz gibi yap\u0131land\u0131rabilir, maksimum performans elde edebilirsiniz.<\/p>\n Daha b\u00fct\u00e7e dostu, \u00f6l\u00e7eklenebilir ve an\u0131nda otomatik kurulum avantaj\u0131na sahip alternatifler ar\u0131yorsan\u0131z, Vps sat\u0131n al<\/a><\/b> \u00e7\u00f6z\u00fcmlerimizi inceleyebilir; Verisunucu.net g\u00fcvencesiyle kesintisiz ve korumal\u0131 bir dijital d\u00fcnyaya ad\u0131m atabilirsiniz!<\/p>\n","protected":false},"excerpt":{"rendered":"Windows tabanl\u0131 bir sunucuyu (VDS veya VPS) y\u00f6netirken kullan\u0131lan en yayg\u0131n, pratik ve performansl\u0131 y\u00f6ntemlerden biri Uzak Masa\u00fcst\u00fc…","protected":false},"author":4,"featured_media":10858,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"csco_singular_sidebar":"","csco_page_header_type":"","csco_page_load_nextpost":"","footnotes":""},"categories":[19,16],"tags":[],"class_list":["post-10856","post","type-post","status-publish","format-standard","has-post-thumbnail","category-sunucu","category-ipuclari","cs-entry"],"_links":{"self":[{"href":"https:\/\/verisunucu.net\/blog\/wp-json\/wp\/v2\/posts\/10856","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/verisunucu.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/verisunucu.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/verisunucu.net\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/verisunucu.net\/blog\/wp-json\/wp\/v2\/comments?post=10856"}],"version-history":[{"count":5,"href":"https:\/\/verisunucu.net\/blog\/wp-json\/wp\/v2\/posts\/10856\/revisions"}],"predecessor-version":[{"id":10864,"href":"https:\/\/verisunucu.net\/blog\/wp-json\/wp\/v2\/posts\/10856\/revisions\/10864"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/verisunucu.net\/blog\/wp-json\/wp\/v2\/media\/10858"}],"wp:attachment":[{"href":"https:\/\/verisunucu.net\/blog\/wp-json\/wp\/v2\/media?parent=10856"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/verisunucu.net\/blog\/wp-json\/wp\/v2\/categories?post=10856"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/verisunucu.net\/blog\/wp-json\/wp\/v2\/tags?post=10856"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}