{"id":9,"date":"2014-10-22T07:26:45","date_gmt":"2014-10-22T07:26:45","guid":{"rendered":"http:\/\/www.buraksuatgorgun.com.tr\/?p=9"},"modified":"2014-10-22T07:26:45","modified_gmt":"2014-10-22T07:26:45","slug":"iis-8-0-uzerinde-dinamik-ip-engelleme","status":"publish","type":"post","link":"https:\/\/www.buraksuatgorgun.com.tr\/index.php\/2014\/10\/22\/iis-8-0-uzerinde-dinamik-ip-engelleme\/","title":{"rendered":"IIS 8.0 \u00dczerinde Dinamik IP Engelleme"},"content":{"rendered":"<p>Merhabalar,<\/p>\n<p>Bu yaz\u0131m\u0131zda IIS 8.0 \u00fczerinde IP engelleme konusundan bahsedece\u011fiz.<\/p>\n<p>IIS7 ve \u00f6nceki versiyonlarda g\u00f6m\u00fcl\u00fc olarak Y\u00f6neticilerin belli bir IP adresinden veya IP aral\u0131\u011f\u0131ndan eri\u015fime izin verip, red edebilece\u011fi bir mod\u00fcl bulunmakta idi. IP adresi bloke edildi\u011fi zaman, o IP adresindeki b\u00fct\u00fcn HTTP kullan\u0131c\u0131lar\u0131 sunucudan &#8221;403.6 Forbidden&#8221; HTTP hatas\u0131n\u0131 al\u0131r ve eri\u015fim sa\u011flayamazlard\u0131. Bu fonksiyon y\u00f6neticilerin sunucular\u0131na giri\u015fleri diledi\u011fi gibi konfig\u00fcre etmesine, Loglardan ya da site \u00fczerindeki aktivitelerden takip ettikleri \u015f\u00fcpheli kullan\u0131c\u0131lar\u0131n eri\u015fimlerini engellemelerine yarard\u0131. Ancak, bu manuel bir i\u015flem. \u015e\u00fcpheli kullan\u0131c\u0131lar\u0131 IIS log dosyalar\u0131n\u0131 inceleyerek tespit edecek bu tip bir fonksiyon scriptlenebilse dahi yine de bir uzman\u0131n manuel incelemesine gereksinim duymaktad\u0131r. Peki IIS 8.0 de neler de\u011fi\u015fti?<\/p>\n<h2>IIS 8<\/h2>\n<p>IIS 8.0 de ise, Microsoft bu fonksiyonu bir ka\u00e7 ek \u00f6zellik ile geli\u015ftirmi\u015ftir;<\/p>\n<ul>\n<li>Dynamic IP address filtering, ki y\u00f6neticilerin sunucular\u0131n\u0131 bir IP adresinden belli bir istek sonras\u0131 IP adresini bloke edebilmelerine yarar.<\/li>\n<li>IP addresi filtreleme y\u00f6neticilerin sunucuyu \u015fu y\u00f6nde ayarlamalar\u0131n\u0131 sa\u011flar, \u015e\u00fcpheli olarak tespit edilen kullan\u0131c\u0131lar\u0131n isteklerine HTTP 403.6 forbidden hatas\u0131 d\u00f6nmek yerine direkt olarak ba\u011flant\u0131 sonlan\u0131r.<\/li>\n<li>IP filtreleme i\u015flemi art\u0131k bir proxy moduna da sahip, ki bu IP adreslerinin sadece IIS in g\u00f6rd\u00fc\u011f\u00fc kullan\u0131c\u0131 IP si baz\u0131nda de\u011fil, HTTP header, ba\u015fl\u0131\u011f\u0131 taraf\u0131ndan iletilen bilgi ve de\u011ferlere g\u00f6re de bloke edilebilmesini sa\u011flamaktad\u0131r.<\/li>\n<\/ul>\n<h2>Ad\u0131m Ad\u0131m Nas\u0131l Yap\u0131l\u0131r?<\/h2>\n<h4>Gerekli Olanlar:<\/h4>\n<ul>\n<li>IIS 8.0 y\u00fckl\u00fc Windows Server 2012 bir sunucu<\/li>\n<li><b>Dikkat<\/b>: IP and Domain Restrictions \u00f6zelli\u011fi feature olarak IIS in bir par\u00e7as\u0131 \u015feklinde y\u00fcklenmelidir.<\/li>\n<\/ul>\n<figure style=\"width: 389px\" class=\"wp-caption alignnone\"><img alt=\"\" width=\"389\" height=\"541\" \/><figcaption class=\"wp-caption-text\">Install<\/figcaption><\/figure>\n<h4>Bilinen sorun ve buglar:<\/h4>\n<p>\u015eu an i\u00e7in bu \u00f6zellik \u00fczerine bilinen bir bug ya da sorun olmamaktad\u0131r.<\/p>\n<h3>IIS&#8217;i Eri\u015fim isteyen HTTP isteklerini Reddetmesi i\u00e7in Konfig\u00fcre Etme<\/h3>\n<p>IIS 8.0 art\u0131k belli bir HTTP clientinin belirtilen bir s\u00fcre\u00e7 i\u00e7erisinde ki giri\u015f say\u0131s\u0131na g\u00f6re reddetmesi ya da anl\u0131k olarak HTTP clientinin ba\u011flant\u0131 say\u0131s\u0131na g\u00f6re reddetmesi y\u00f6n\u00fcnde ayarlanabilir.<\/p>\n<p>IIS&#8217;i bu y\u00f6nde , ald\u0131\u011f\u0131 istek say\u0131s\u0131na g\u00f6re reddetmesi ad\u0131na konfig\u00fcre etmek i\u00e7in;<\/p>\n<ol>\n<li>Windows Server 2012 sunucunuza Admin olarak giri\u015f yap\u0131n..<\/li>\n<li><b>Internet Information Services (IIS) Manager&#8217;\u0131 a\u00e7\u0131n<\/b>.<\/li>\n<li>Sunucunuzu, ilgili siteyi, nerede i\u015flem yapmak istiyor iseniz <b>Connections<\/b> panelinde se\u00e7in, ve <b>IP Address and Domain Restrictions <\/b>&#8216;a \u00e7ift t\u0131klayarak giri\u015f yap\u0131n\u0131z.<br \/>\n<a target=\"_blank\"><img alt=\"\" border=\"2\" \/><\/a><\/li>\n<li><b>Edit Dynamic Restriction Settings&#8217;<\/b>e <b>Actions<\/b> Panelinden giri\u015f yap\u0131n\u0131z.<br \/>\n<a href=\"https:\/\/i2.iis.net\/media\/7186600\/iis-80-dynamic-ip-address-restrictions-1093-image005.png?cdn_id=2014-02-20-001\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/i2.iis.net\/media\/7186600\/iis-80-dynamic-ip-address-restrictions-1093-image005.png?cdn_id=2014-02-20-001\" alt=\"\" border=\"2\" \/><\/a><\/li>\n<li><b>Dynamic IP Restriction Settings<\/b> diyalog kutusu g\u00f6zlendi\u011finde e\u011fer HTTP Clientinin ayn\u0131 anda \u00e7ok fazla giri\u015f yapmas\u0131n\u0131 engellemek i\u00e7in <b>Deny IP Address based on the number of concurrent requests<\/b> &#8216;i se\u00e7iniz. HTTP clientinin belirtilen bir s\u00fcre\u00e7 i\u00e7erisinde ki giri\u015f say\u0131s\u0131na g\u00f6re reddetmesi i\u00e7in ise <b>Deny IP Address based on the number of requests over a period of time<\/b> &#8216;\u0131 se\u00e7iniz ve milisaniye baz\u0131nda ka\u00e7 giri\u015f sa\u011flayabilece\u011fini belirtiniz.<br \/>\n<img decoding=\"async\" src=\"https:\/\/i3.iis.net\/media\/7186594\/iis-80-dynamic-ip-address-restrictions-1093-image007.png?cdn_id=2014-02-20-001\" alt=\"\" border=\"2\" \/><\/li>\n<li><b>OK<\/b>&#8216;a t\u0131klay\u0131n\u0131z.<\/li>\n<\/ol>\n<h3>IIS&#8217;in IP Adresini Reddederken ki Davran\u0131\u015f\u0131n\u0131 Ayarlamak<\/h3>\n<p>IIS 7 ve \u00f6nceki s\u00fcr\u00fcmlerde, IIS daima bloke edilmi\u015f bir IP adresine cevap verecek iken HTTP error &#8220;403.6 Forbidden&#8221; hatas\u0131n\u0131 d\u00f6nerdi. IIS 8.0 da ise, Y\u00f6netici sunucuyu pek \u00e7ok \u015fekilde IP adresini reddedecek konfig\u00fcrasyonu sa\u011flayabilir.<\/p>\n<p>IP Adresslerini reddeder iken sunucunun ne \u015fekilde davranaca\u011f\u0131n\u0131 ayarlamak i\u00e7in:<\/p>\n<ol>\n<li>Windows Server 2012 sunucunuza Admin olarak giri\u015f yap\u0131n..<\/li>\n<li><b>Internet Information Services (IIS) Manager&#8217;\u0131 a\u00e7\u0131n<\/b>.<\/li>\n<li>Sunucunuzu, ilgili siteyi, nerede i\u015flem yapmak istiyor iseniz <b>Connections<\/b> panelinde se\u00e7in, ve <b>IP Address and Domain Restrictions <\/b>&#8216;a \u00e7ift t\u0131klayarak giri\u015f yap\u0131n\u0131z.<\/li>\n<li><a href=\"https:\/\/i3.iis.net\/media\/7186588\/iis-80-dynamic-ip-address-restrictions-1093-image009.jpg?cdn_id=2014-02-20-001\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/i3.iis.net\/media\/7186588\/iis-80-dynamic-ip-address-restrictions-1093-image009.jpg?cdn_id=2014-02-20-001\" alt=\"\" border=\"2\" \/><\/a><\/li>\n<li><b>Actions<\/b> Panelinden <b>Edit Feature Settings<\/b>&#8216;e t\u0131kl\u0131yoruz.<br \/>\n<a href=\"https:\/\/i3.iis.net\/media\/7186582\/iis-80-dynamic-ip-address-restrictions-1093-image010.png?cdn_id=2014-02-20-001\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/i3.iis.net\/media\/7186582\/iis-80-dynamic-ip-address-restrictions-1093-image010.png?cdn_id=2014-02-20-001\" alt=\"\" border=\"2\" \/><\/a><\/li>\n<li><b>Edit IP and Domain Restriction Settings<\/b> diyalog kutusu g\u00f6zlendi\u011finde, <b>Deny Action Type<\/b> &#8216;e t\u0131klay\u0131n ve a\u015fa\u011f\u0131uya do\u011fru a\u00e7\u0131lan drop-down men\u00fc \u00fczerinden IIS&#8217;in ne \u015fekilde davranaca\u011f\u0131n\u0131 se\u00e7in:\n<ul>\n<li><b>Unauthorized<\/b>: IIS, HTTP 401 cevab\u0131 ve hatas\u0131n\u0131 iletir.<\/li>\n<li><b>Forbidden<\/b>: IIS, HTTP 403 cevab\u0131 ve hatas\u0131n\u0131 iletir.<\/li>\n<li><b>Not Found<\/b>: IIS, HTTP 404 cevab\u0131 ve hatas\u0131n\u0131 iletir.<\/li>\n<li><b>Abort<\/b>: IIS, HTTP ba\u011flant\u0131s\u0131n\u0131 sonland\u0131r\u0131r.<\/li>\n<\/ul>\n<p><img decoding=\"async\" src=\"https:\/\/i1.iis.net\/media\/7186576\/iis-80-dynamic-ip-address-restrictions-1093-image012.png?cdn_id=2014-02-20-001\" alt=\"\" border=\"2\" \/><\/li>\n<li>Click <b>OK<\/b>.<\/li>\n<\/ol>\n<h3>IIS&#8217;i Proxy Modu i\u00e7in Ayarlamak<\/h3>\n<p>IP Filtreleme y\u00f6n\u00fcndeki en b\u00fcy\u00fck problemlerden biri, pek \u00e7ok kullan\u0131c\u0131n\u0131n IIS&#8217;e bir veya birden fazla firewall arkas\u0131ndan gelmesi, load-balancer arkas\u0131ndan gelmesi, proxy kullanarak eri\u015fmesi vb. durumlard\u0131r; b\u00f6ylece IP adresi IIS sunucusu \u00fczerinde eri\u015fmek istedi\u011fi yola daima yak\u0131n g\u00f6z\u00fckmeyi ba\u015farabilir. IIS 8.0&#8217;de Y\u00f6neticiler sunucular\u0131n\u0131 IP bazl\u0131 bloklama d\u0131\u015f\u0131nda <i>x-forwarded-for<\/i> HTTP header i\u015flemini incelemesi i\u00e7in ayarlayabilmektedir. Bu davran\u0131\u015f &#8220;Proxy Mode.&#8221; olarak adland\u0131r\u0131lmaktad\u0131r.<\/p>\n<p>IIS&#8217;i proxy modunda ayarlamak i\u00e7in a\u015fa\u011f\u0131daki y\u00f6nergeyi takip ediniz:<\/p>\n<ol>\n<li>Windows Server 2012 sunucunuza Admin oalrak giri\u015f yap\u0131n..<\/li>\n<li><b>Internet Information Services (IIS) Manager&#8217;\u0131 a\u00e7\u0131n<\/b>.<\/li>\n<li>Sunucunuzu, ilgili siteyi, nerede i\u015flem yapmak istiyor iseniz <b>Connections<\/b> panelinde se\u00e7in, ve <b>IP Address and Domain Restrictions <\/b>&#8216;a \u00e7ift t\u0131klayarak giri\u015f yap\u0131n\u0131z.<\/li>\n<\/ol>\n<ol>\n<li><a href=\"https:\/\/i3.iis.net\/media\/7186570\/iis-80-dynamic-ip-address-restrictions-1093-image014.jpg?cdn_id=2014-02-20-001\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/i3.iis.net\/media\/7186570\/iis-80-dynamic-ip-address-restrictions-1093-image014.jpg?cdn_id=2014-02-20-001\" alt=\"\" border=\"2\" \/><\/a><\/li>\n<li><b>Actions<\/b> Panelinden <b>Edit Feature Settings<\/b>&#8216;e t\u0131kl\u0131yoruz.<br \/>\n<a href=\"https:\/\/i3.iis.net\/media\/7186582\/iis-80-dynamic-ip-address-restrictions-1093-image010.png?cdn_id=2014-02-20-001\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/i3.iis.net\/media\/7186582\/iis-80-dynamic-ip-address-restrictions-1093-image010.png?cdn_id=2014-02-20-001\" alt=\"\" border=\"2\" \/><\/a><\/li>\n<li>\u00a0<b>Edit IP and Domain Restriction Settings<\/b> diyalog kutusu g\u00f6zlendi\u011fi zaman, <b>Enable Proxy Mode<\/b>.&#8217;u aktif ediyoruz.<br \/>\n<img decoding=\"async\" src=\"https:\/\/i3.iis.net\/media\/7186564\/iis-80-dynamic-ip-address-restrictions-1093-image016.png?cdn_id=2014-02-20-001\" alt=\"\" border=\"2\" \/><\/li>\n<li><b>OK<\/b>&#8216;a t\u0131klay\u0131n\u0131z.<\/li>\n<\/ol>\n<h2>Sonu\u00e7<\/h2>\n<p>Bu makalede, IIS&#8217;in dinamik olarak sunucu baz\u0131nda ya da site baz\u0131nda nas\u0131l IP adreslerinden gelen istekleri nas\u0131l ve ne \u015fekilde reddedebilece\u011finizi, ayr\u0131ca k\u00f6t\u00fc niyetli olabilecek kullan\u0131c\u0131lara kar\u015f\u0131 etkili olan IIS&#8217;in ba\u011flant\u0131lar\u0131 reddeder iken ne \u015fekilde davranaca\u011f\u0131n\u0131 \u00f6\u011frenmi\u015f olduk.<\/p>\n<p>Hay\u0131rl\u0131 \u00c7al\u0131\u015fmalar<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Merhabalar, Bu yaz\u0131m\u0131zda IIS 8.0 \u00fczerinde IP engelleme konusundan bahsedece\u011fiz. IIS7 ve \u00f6nceki versiyonlarda g\u00f6m\u00fcl\u00fc olarak Y\u00f6neticilerin belli bir IP adresinden veya IP aral\u0131\u011f\u0131ndan eri\u015fime izin verip, red edebilece\u011fi bir mod\u00fcl bulunmakta idi. IP adresi bloke edildi\u011fi zaman, o IP adresindeki b\u00fct\u00fcn HTTP kullan\u0131c\u0131lar\u0131 sunucudan &#8221;403.6 Forbidden&#8221; HTTP hatas\u0131n\u0131 al\u0131r ve eri\u015fim sa\u011flayamazlard\u0131. Bu fonksiyon [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[11,12,15,16,31,37,45,46,90,93],"class_list":["post-9","post","type-post","status-publish","format-standard","hentry","category-windows","tag-11","tag-8-0","tag-asp","tag-asp-net","tag-dinamik","tag-engelleme","tag-iis","tag-ip","tag-uzerinde","tag-windows"],"_links":{"self":[{"href":"https:\/\/www.buraksuatgorgun.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/9","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.buraksuatgorgun.com.tr\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.buraksuatgorgun.com.tr\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.buraksuatgorgun.com.tr\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.buraksuatgorgun.com.tr\/index.php\/wp-json\/wp\/v2\/comments?post=9"}],"version-history":[{"count":0,"href":"https:\/\/www.buraksuatgorgun.com.tr\/index.php\/wp-json\/wp\/v2\/posts\/9\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.buraksuatgorgun.com.tr\/index.php\/wp-json\/wp\/v2\/media?parent=9"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.buraksuatgorgun.com.tr\/index.php\/wp-json\/wp\/v2\/categories?post=9"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.buraksuatgorgun.com.tr\/index.php\/wp-json\/wp\/v2\/tags?post=9"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}