{"id":2423,"date":"2026-07-15T17:43:52","date_gmt":"2026-07-15T14:43:52","guid":{"rendered":"https:\/\/saviorhost.com\/blog\/modsecurity-nedir-ve-yapilandirmasi-nasil-yapilir-2026\/"},"modified":"2026-07-15T17:48:17","modified_gmt":"2026-07-15T14:48:17","slug":"modsecurity-nedir-ve-yapilandirmasi-nasil-yapilir-2026","status":"publish","type":"post","link":"https:\/\/saviorhost.com\/blog\/modsecurity-nedir-ve-yapilandirmasi-nasil-yapilir-2026\/","title":{"rendered":"modsecurity nedir ve yapilandirmasi nasil yapilir 2026"},"content":{"rendered":"<h2 id=\"modsecurity-nedir-ve-yapilandirmasi-nasil-yapilir-2026-web-sunucunuzu-korumak-icin-9-kritik-adim\"><strong>modsecurity nedir ve yapilandirmasi nasil yapilir 2026<\/strong>: Web Sunucunuzu Korumak \u0130\u00e7in 9 Kritik Ad\u0131m<\/h2>\n<p>Gecenin bir yar\u0131s\u0131 telefonunuzun acil durum bildirimleriyle \u00e7ald\u0131\u011f\u0131n\u0131 hayal edin. Web sitenize devasa bir SQL Injection sald\u0131r\u0131s\u0131 yap\u0131l\u0131yor ve veritaban\u0131n\u0131z tehlike alt\u0131nda. \u0130\u015fte tam bu noktada, sunucunuzun \u00f6n\u00fcnde g\u00f6r\u00fcnmez bir kalkan gibi duran sistemlerin de\u011feri anla\u015f\u0131l\u0131r. E\u011fer dijital varl\u0131klar\u0131n\u0131z\u0131 korumak istiyorsan\u0131z, <strong>modsecurity nedir ve yapilandirmasi nasil yapilir 2026<\/strong> standartlar\u0131na g\u00f6re bunu \u00f6\u011frenmek art\u0131k bir se\u00e7enek de\u011fil, kesin bir zorunluluktur.<\/p>\n<p>Siber sald\u0131r\u0131lar\u0131n yapay zeka destekli botlarla otomatikle\u015ftirildi\u011fi 2026 y\u0131l\u0131nda, geleneksel g\u00fcvenlik duvarlar\u0131 tek ba\u015f\u0131na yeterli olmuyor. Uygulama katman\u0131nda (Layer 7) ger\u00e7ekle\u015fen karma\u015f\u0131k tehditleri alg\u0131lay\u0131p engellemek i\u00e7in ak\u0131ll\u0131 bir Web Uygulamas\u0131 G\u00fcvenlik Duvar\u0131&#8217;na (WAF) ihtiyac\u0131n\u0131z var. Bu rehberde, a\u00e7\u0131k kaynak d\u00fcnyas\u0131n\u0131n en g\u00fc\u00e7l\u00fc WAF \u00e7\u00f6z\u00fcm\u00fc olan ModSecurity&#8217;nin derinliklerine inecek, s\u0131f\u0131rdan kurulumunu yapacak ve sitenizi yava\u015flatmadan maksimum g\u00fcvenli\u011fi nas\u0131l sa\u011flayaca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m inceleyece\u011fiz.<\/p>\n<div class=\"key-takeaways\" style=\"background: #f0f9ff; border-left: 4px solid #0ea5e9; padding: 20px; margin: 20px 0; border-radius: 8px;\">\n<h3 id=\"%f0%9f%93%8b-onemli-noktalar\">\ud83d\udccb \u00d6nemli Noktalar<\/h3>\n<ul>\n<li>ModSecurity, web uygulamalar\u0131n\u0131z\u0131 SQLi, XSS ve LFI gibi Layer 7 sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruyan a\u00e7\u0131k kaynakl\u0131 bir WAF motorudur.<\/li>\n<li>Tek ba\u015f\u0131na bir i\u015fe yaramaz; g\u00fcc\u00fcn\u00fc OWASP Core Rule Set (CRS) gibi kural setlerinden al\u0131r.<\/li>\n<li>Kurulum sonras\u0131 &#8220;DetectionOnly&#8221; modunda \u00e7al\u0131\u015ft\u0131r\u0131larak sistemin loglar\u0131 analiz edilmeli, ard\u0131ndan &#8220;On&#8221; moduna al\u0131nmal\u0131d\u0131r.<\/li>\n<li>Yanl\u0131\u015f alarmlar\u0131 (False Positive) \u00f6nlemek i\u00e7in kural istisnalar\u0131 (Rule Exceptions) yap\u0131land\u0131rmak kritik bir ad\u0131md\u0131r.<\/li>\n<li>Performans kayb\u0131 ya\u015famamak i\u00e7in NVMe SSD ve g\u00fc\u00e7l\u00fc i\u015flemcilere sahip sunucu altyap\u0131lar\u0131 tercih edilmelidir.<\/li>\n<\/ul>\n<\/div>\n<div class=\"wp-block-rank-math-toc-block table-of-contents\" role=\"navigation\" aria-label=\"\u0130\u00e7indekiler\">\n<h2 id=\"icindekiler\">\u0130\u00e7indekiler<\/h2>\n<figure class=\"wp-block-image size-large sm-inline-image\"><img decoding=\"async\" src=\"https:\/\/saviorhost.com\/blog\/wp-content\/uploads\/2026\/07\/Karanlik-bir-arka-planda-parlayan-neon-mavi-ve-y-1784126636.jpg\" alt=\"Karanl\u0131k bir arka planda, parlayan neon mavi ve ye\u015fil renklerle tasarlanm\u0131\u015f bir siber g\u00fcvenlik kalkan\u0131. Kalkan\u0131n \u00fczerinde dijital veri ak\u0131\u015flar\u0131 (1 ve 0'lar) sekiyor. Arka planda sil\u00fcet halinde bir sunucu kabini var. Stil: Siberpunk, y\u00fcksek teknoloji, fotoger\u00e7ek\u00e7i.\" \/><\/figure>\n<ul>\n<li><a href=\"#modsecurity-nedir\">ModSecurity Nedir ve Neden 2026&#8217;da Vazge\u00e7ilmezdir?<\/a><\/li>\n<li><a href=\"#nasil-calisir\">ModSecurity Nas\u0131l \u00c7al\u0131\u015f\u0131r? \u00c7ekirdek Mekanizmay\u0131 Anlamak<\/a><\/li>\n<li><a href=\"#kurulum-yapilandirma\">modsecurity nedir ve yapilandirmasi nasil yapilir 2026: Ad\u0131m Ad\u0131m Kurulum<\/a><\/li>\n<li><a href=\"#owasp-crs-ayarlari\">OWASP CRS Entegrasyonu ve Temel Konfig\u00fcrasyon Ayarlar\u0131<\/a><\/li>\n<li><a href=\"#false-positive-cozumu\">False Positive (Yanl\u0131\u015f Alarm) Sorunlar\u0131n\u0131 \u00c7\u00f6zmek<\/a><\/li>\n<li><a href=\"#saviorhost-guvenlik\">SaviorHost Altyap\u0131s\u0131nda ModSecurity ve G\u00fcvenlik Avantajlar\u0131<\/a><\/li>\n<li><a href=\"#sonuc\">Sonu\u00e7 ve G\u00fcvenli Gelecek<\/a><\/li>\n<\/ul>\n<\/div>\n<h2 id=\"modsecurity-nedir\">ModSecurity Nedir ve Neden 2026&#8217;da Vazge\u00e7ilmezdir?<\/h2>\n<figure class=\"wp-block-image size-large sm-inline-image\"><img decoding=\"async\" src=\"https:\/\/saviorhost.com\/blog\/wp-content\/uploads\/2026\/07\/Bir-bilgisayar-korsaninin-kapusonlu-figur-k-1784126641.jpg\" alt=\"Bir bilgisayar korsan\u0131n\u0131n (kap\u00fc\u015fonlu fig\u00fcr) klavye ba\u015f\u0131nda kod yazarken, ekran\u0131ndan \u00e7\u0131kan k\u0131rm\u0131z\u0131 zararl\u0131 kodlar\u0131n devasa, \u015feffaf bir mavi kalkan (ModSecurity WAF) taraf\u0131ndan engellendi\u011fini g\u00f6steren 3D ill\u00fcstrasyon. Kalkan\u0131n arkas\u0131nda g\u00fcvenli, ye\u015fil renkte parlayan web sunucular\u0131 bulunuyor.\" \/><\/figure>\n<p>Konuya en temelden girelim. ModSecurity, asl\u0131nda web sunucunuz (Apache, Nginx veya IIS) i\u00e7in geli\u015ftirilmi\u015f a\u00e7\u0131k kaynakl\u0131 bir eklentidir. Temel g\u00f6revi, web sitenize gelen HTTP ve HTTPS trafiklerini ger\u00e7ek zamanl\u0131 olarak izlemek, analiz etmek ve zararl\u0131 g\u00f6rd\u00fc\u011f\u00fc istekleri sunucuya ula\u015fmadan engellemektir.<\/p>\n<p>Peki standart bir g\u00fcvenlik duvar\u0131ndan (Firewall) fark\u0131 ne? Geleneksel g\u00fcvenlik duvarlar\u0131 genellikle IP adreslerine ve port numaralar\u0131na bakar (\u00d6rne\u011fin: &#8220;80 portunu a\u00e7, \u015fu IP&#8217;yi engelle&#8221;). Ancak ModSecurity bir WAF (Web Application Firewall) olarak i\u00e7eri\u011fe bakar. Gelen iste\u011fin i\u00e7indeki parametreleri, form verilerini, \u00e7erezleri (cookies) ve HTTP ba\u015fl\u0131klar\u0131n\u0131 okur. <a href=\"https:\/\/owasp.org\/www-project-modsecurity-core-rule-set\/\" target=\"_blank\" rel=\"noopener nofollow\">OWASP (Open Worldwide Application Security Project)<\/a> standartlar\u0131na g\u00f6re, bir iste\u011fin i\u00e7inde veritaban\u0131n\u0131z\u0131 s\u0131zd\u0131rmaya y\u00f6nelik bir SQL komutu gizliyse, ModSecurity bunu an\u0131nda fark eder ve ba\u011flant\u0131y\u0131 keser.<\/p>\n<h3 id=\"gelisen-tehditler-karsisinda-waf-ihtiyaci\">Geli\u015fen Tehditler Kar\u015f\u0131s\u0131nda WAF \u0130htiyac\u0131<\/h3>\n<p>2026 y\u0131l\u0131 itibar\u0131yla siber sald\u0131rganlar art\u0131k manuel olarak a\u00e7\u0131k aram\u0131yor. Bot a\u011flar\u0131, saniyeler i\u00e7inde binlerce siteyi taray\u0131p bilinen zafiyetleri s\u00f6m\u00fcrmeye \u00e7al\u0131\u015f\u0131yor. \u00d6zellikle a\u00e7\u0131k kaynakl\u0131 CMS sistemleri kullan\u0131yorsan\u0131z, bir eklentideki s\u0131f\u0131r\u0131nc\u0131 g\u00fcn (zero-day) a\u00e7\u0131\u011f\u0131 sitenizin sonu olabilir. ModSecurity, sanal bir yama (virtual patching) g\u00f6revi g\u00f6rerek, siz hen\u00fcz yaz\u0131l\u0131m\u0131n\u0131z\u0131 g\u00fcncellemeden \u00f6nce bile bu sald\u0131r\u0131lar\u0131 durdurabilir.<\/p>\n<p>E\u011fer g\u00fc\u00e7l\u00fc bir altyap\u0131 aray\u0131\u015f\u0131ndaysan\u0131z, <a href=\"https:\/\/saviorhost.com\/blog\/linux-web-hosting-rehberi-2026da-maksimum-performans-ve-guvenlik\/\">Linux Web Hosting Rehberi: 2026\u2019da Maksimum Performans ve G\u00fcvenlik<\/a> ba\u015fl\u0131kl\u0131 makalemizi inceleyerek sunucu taraf\u0131ndaki di\u011fer g\u00fcvenlik katmanlar\u0131 hakk\u0131nda da bilgi sahibi olabilirsiniz.<\/p>\n<h2 id=\"nasil-calisir\">ModSecurity Nas\u0131l \u00c7al\u0131\u015f\u0131r? \u00c7ekirdek Mekanizmay\u0131 Anlamak<\/h2>\n<figure class=\"wp-block-image size-large sm-inline-image\"><img decoding=\"async\" src=\"https:\/\/saviorhost.com\/blog\/wp-content\/uploads\/2026\/07\/Linux-terminal-ekrani-gorunumu.-Siyah-arka-pl-1784126646.jpg\" alt=\"Linux terminal ekran\u0131 g\u00f6r\u00fcn\u00fcm\u00fc. Siyah arka plan \u00fczerinde ye\u015fil ve beyaz renkli yaz\u0131larla 'apt-get install libapache2-mod-security2' komutu \u00e7al\u0131\u015ft\u0131r\u0131l\u0131yor. Ekranda 'modsecurity nedir ve yapilandirmasi nasil yapilir 2026' metni k\u00fc\u00e7\u00fck bir yorum sat\u0131r\u0131 olarak yer al\u0131yor. Modern ve teknik bir g\u00f6r\u00fcn\u00fcm.\" \/><\/figure>\n<p>ModSecurity&#8217;nin \u00e7al\u0131\u015fma mant\u0131\u011f\u0131n\u0131 anlamak, yap\u0131land\u0131rma a\u015famas\u0131nda i\u015finizi inan\u0131lmaz derecede kolayla\u015ft\u0131racakt\u0131r. Sistem, gelen bir HTTP iste\u011fini be\u015f farkl\u0131 a\u015famada (phase) inceler.<\/p>\n<h3 id=\"5-asamali-islem-dongusu\">5 A\u015famal\u0131 \u0130\u015flem D\u00f6ng\u00fcs\u00fc<\/h3>\n<p>Bir ziyaret\u00e7i (veya bir bot) sitenize girmeye \u00e7al\u0131\u015ft\u0131\u011f\u0131nda \u015fu s\u00fcre\u00e7 i\u015fler:<\/p>\n<ul>\n<li><strong>A\u015fama 1 (Request Headers):<\/strong> \u0130stek ba\u015fl\u0131klar\u0131 incelenir. Hangi taray\u0131c\u0131 kullan\u0131l\u0131yor? \u0130stek nereden geliyor? User-Agent bilgisi sahte mi?<\/li>\n<li><strong>A\u015fama 2 (Request Body):<\/strong> POST istekleri, yani form doldurma veya dosya y\u00fckleme i\u015flemleri taran\u0131r. Y\u00fcklenen dosya bir zararl\u0131 yaz\u0131l\u0131m m\u0131? Form alan\u0131na SQL kodu mu yaz\u0131lm\u0131\u015f?<\/li>\n<li><strong>A\u015fama 3 (Response Headers):<\/strong> Sunucunuzun verece\u011fi yan\u0131t\u0131n ba\u015fl\u0131klar\u0131 kontrol edilir. Yanl\u0131\u015fl\u0131kla kritik bir sistem bilgisi mi s\u0131zd\u0131r\u0131l\u0131yor?<\/li>\n<li><strong>A\u015fama 4 (Response Body):<\/strong> Sunucunun g\u00f6nderdi\u011fi HTML \u00e7\u0131kt\u0131s\u0131 incelenir. Veritaban\u0131 hata mesajlar\u0131 (korsanlara ipucu verir) ekrana yans\u0131yor mu?<\/li>\n<li><strong>A\u015fama 5 (Logging):<\/strong> T\u00fcm bu s\u00fcrecin kayd\u0131 tutulur. Hangi kural tetiklendi, neden engellendi?<\/li>\n<\/ul>\n<p>Bu a\u015famalar\u0131 sorunsuz i\u015fletebilmek i\u00e7in y\u00fcksek okuma\/yazma h\u0131zlar\u0131na sahip diskler \u015fartt\u0131r. SaviorHost&#8217;un sundu\u011fu <strong>Linux Hosting<\/strong> paketlerinde yer alan NVMe SSD altyap\u0131s\u0131, bu loglama ve analiz s\u00fcre\u00e7lerinin milisaniyeler i\u00e7inde tamamlanmas\u0131n\u0131 sa\u011flayarak sitenizin h\u0131z\u0131ndan \u00f6d\u00fcn vermesini engeller.<\/p>\n<h2 id=\"kurulum-yapilandirma\"><strong>modsecurity nedir ve yapilandirmasi nasil yapilir 2026<\/strong>: Ad\u0131m Ad\u0131m Kurulum<\/h2>\n<p>\u0130\u015fte rehberimizin en can al\u0131c\u0131 noktas\u0131na geldik. Arama motorlar\u0131nda s\u0131k\u00e7a arat\u0131lan <strong>modsecurity nedir ve yapilandirmasi nasil yapilir 2026<\/strong> konusunu pratik ad\u0131mlara d\u00f6k\u00fcyoruz. Kurulum ad\u0131mlar\u0131 kulland\u0131\u011f\u0131n\u0131z web sunucusuna (Apache veya Nginx) g\u00f6re de\u011fi\u015fiklik g\u00f6sterir.<\/p>\n<h3 id=\"apache-sunucularinda-kurulum-ubuntu-debian\">Apache Sunucular\u0131nda Kurulum (Ubuntu\/Debian)<\/h3>\n<p>Apache kullan\u0131yorsan\u0131z i\u015finiz nispeten daha kolayd\u0131r \u00e7\u00fcnk\u00fc ModSecurity mod\u00fcl\u00fc resmi depolarda haz\u0131r olarak bulunur. SSH \u00fczerinden sunucunuza root olarak ba\u011flan\u0131n ve \u015fu komutlar\u0131 s\u0131ras\u0131yla \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n<pre><code class=\"language-bash\">\r\n# Paket listelerini g\u00fcncelleyelim\r\nsudo apt-get update\r\n\r\n# ModSecurity mod\u00fcl\u00fcn\u00fc kural\u0131m\r\nsudo apt-get install libapache2-mod-security2 -y\r\n\r\n# Mod\u00fcl\u00fc aktif edelim\r\nsudo a2enmod security2\r\n\r\n# Apache'yi yeniden ba\u015flatal\u0131m\r\nsudo systemctl restart apache2\r\n<\/code><\/pre>\n<p>Kurulum tamamland\u0131ktan sonra, varsay\u0131lan yap\u0131land\u0131rma dosyas\u0131n\u0131 aktif hale getirmemiz gerekiyor:<\/p>\n<pre><code class=\"language-bash\">\r\nsudo cp \/etc\/modsecurity\/modsecurity.conf-recommended \/etc\/modsecurity\/modsecurity.conf\r\n<\/code><\/pre>\n<h3 id=\"nginx-sunucularinda-kurulum-libmodsecurity3\">Nginx Sunucular\u0131nda Kurulum (Libmodsecurity3)<\/h3>\n<p>Nginx taraf\u0131nda durum biraz daha farkl\u0131d\u0131r. Nginx mod\u00fclleri dinamik olarak y\u00fcklemedi\u011fi i\u00e7in (eski s\u00fcr\u00fcmlerde), ModSecurity v3&#8217;\u00fc (Libmodsecurity) Nginx ile birlikte derlemeniz veya dinamik mod\u00fcl olarak eklemeniz gerekir. 2026 standartlar\u0131nda \u00e7o\u011fu modern Linux da\u011f\u0131t\u0131m\u0131 bunu paket olarak sunmaya ba\u015flad\u0131.<\/p>\n<pre><code class=\"language-bash\">\r\n# Gerekli ba\u011f\u0131ml\u0131l\u0131klar\u0131 y\u00fckleyin\r\nsudo apt-get install libnginx-mod-http-modsecurity -y\r\n\r\n# Nginx yap\u0131land\u0131rma dosyas\u0131n\u0131 a\u00e7\u0131n\r\nsudo nano \/etc\/nginx\/nginx.conf\r\n<\/code><\/pre>\n<p><code>http {}<\/code> blo\u011funun i\u00e7ine \u015fu sat\u0131rlar\u0131 ekleyerek mod\u00fcl\u00fc aktif edin:<\/p>\n<pre><code class=\"language-nginx\">\r\nmodsecurity on;\r\nmodsecurity_rules_file \/etc\/nginx\/modsec\/main.conf;\r\n<\/code><\/pre>\n<p>E\u011fer terminal ekranlar\u0131yla saatlerce u\u011fra\u015fmak istemiyorsan\u0131z, arka planda t\u00fcm bu g\u00fcvenlik yap\u0131land\u0131rmalar\u0131n\u0131 sizin yerinize otomatize eden <strong>Keypanel Hosting<\/strong> \u00e7\u00f6z\u00fcmleri hayat kurtar\u0131c\u0131 olabilir. \u00d6zellikle <a href=\"https:\/\/saviorhost.com\/blog\/keyhelp-panel-nedir-2026-rehberi\/\">KeyHelp Panel Nedir?<\/a> yaz\u0131m\u0131zda belirtti\u011fimiz gibi, modern paneller ModSecurity y\u00f6netimini tek bir t\u0131kla yapabilmenize olanak tan\u0131r.<\/p>\n<h2 id=\"owasp-crs-ayarlari\">OWASP CRS Entegrasyonu ve Temel Konfig\u00fcrasyon Ayarlar\u0131<\/h2>\n<p>ModSecurity&#8217;yi kurduk, harika. Ancak \u015fu an elinizde mermisi olmayan bir silah var. ModSecurity tek ba\u015f\u0131na kurallar\u0131 bilmez, sadece kurallar\u0131 uygulayan bir motordur. Ona neyin zararl\u0131 oldu\u011funu \u00f6\u011fretecek bir kural setine ihtiyac\u0131m\u0131z var. \u0130\u015fte burada end\u00fcstri standard\u0131 olan OWASP Core Rule Set (CRS) devreye giriyor.<\/p>\n<h3 id=\"owasp-crsyi-indirmek-ve-kurmak\">OWASP CRS&#8217;yi \u0130ndirmek ve Kurmak<\/h3>\n<p>Sunucunuza OWASP kurallar\u0131n\u0131 \u00e7ekmek i\u00e7in \u015fu ad\u0131mlar\u0131 izleyin:<\/p>\n<pre><code class=\"language-bash\">\r\n# Eski kurallar\u0131 yedekleyelim (varsa)\r\nsudo mv \/usr\/share\/modsecurity-crs \/usr\/share\/modsecurity-crs.bak\r\n\r\n# OWASP CRS'nin en g\u00fcncel s\u00fcr\u00fcm\u00fcn\u00fc indirelim\r\nsudo git clone https:\/\/github.com\/coreruleset\/coreruleset \/usr\/share\/modsecurity-crs\r\n\r\n# \u00d6rnek yap\u0131land\u0131rma dosyas\u0131n\u0131 aktif edelim\r\nsudo cp \/usr\/share\/modsecurity-crs\/crs-setup.conf.example \/usr\/share\/modsecurity-crs\/crs-setup.conf\r\n<\/code><\/pre>\n<h3 id=\"modsecurity-conf-dosyasinin-incelenmesi-ve-secruleengine\">modsecurity.conf Dosyas\u0131n\u0131n \u0130ncelenmesi ve SecRuleEngine<\/h3>\n<p>\u015eimdi en kritik yap\u0131land\u0131rma dosyas\u0131 olan <code>\/etc\/modsecurity\/modsecurity.conf<\/code> dosyas\u0131n\u0131 d\u00fczenleyece\u011fiz. Dosyay\u0131 a\u00e7\u0131n ve \u015fu sat\u0131r\u0131 bulun:<\/p>\n<p><code>SecRuleEngine DetectionOnly<\/code><\/p>\n<p>Bu ayar hayati \u00f6neme sahiptir. <strong>DetectionOnly<\/strong> modu, ModSecurity&#8217;nin gelen tehditleri sadece g\u00fcnl\u00fc\u011fe kaydetmesini (loglamas\u0131n\u0131) ancak engellememesini sa\u011flar. Sistemi ilk kurdu\u011funuzda KES\u0130NL\u0130KLE bu modda b\u0131rakmal\u0131s\u0131n\u0131z. E\u011fer do\u011frudan <code>SecRuleEngine On<\/code> yaparsan\u0131z, sitenizin normal fonksiyonlar\u0131 (\u00f6rne\u011fin WordPress admin paneline yaz\u0131 ekleme) yanl\u0131\u015fl\u0131kla engellenebilir.<\/p>\n<p>Bir e-ticaret siteniz varsa, \u00f6deme sayfas\u0131ndaki karma\u015f\u0131k form verileri WAF taraf\u0131ndan tehdit olarak alg\u0131lanabilir. Bu nedenle, sistemi 1-2 g\u00fcn &#8220;DetectionOnly&#8221; modunda izleyip loglar\u0131 analiz etmek en g\u00fcvenli yoldur. G\u00fcvenli ve kesintisiz bir sat\u0131\u015f altyap\u0131s\u0131 kurmak istiyorsan\u0131z, <a href=\"https:\/\/saviorhost.com\/blog\/e-ticaret-hosting-nedir-2026da-satislarinizi-artiracak-altyapi-rehberi\/\">E-Ticaret Hosting Nedir? 2026\u2019da Sat\u0131\u015flar\u0131n\u0131z\u0131 Art\u0131racak Altyap\u0131 Rehberi<\/a> ba\u015fl\u0131kl\u0131 yaz\u0131m\u0131za g\u00f6z atman\u0131z\u0131 tavsiye ederiz. Do\u011fru yap\u0131land\u0131r\u0131lm\u0131\u015f bir <strong>E-Ticaret Hosting<\/strong> altyap\u0131s\u0131, WAF kurallar\u0131yla tam uyumlu \u00e7al\u0131\u015f\u0131r.<\/p>\n<h2 id=\"false-positive-cozumu\">False Positive (Yanl\u0131\u015f Alarm) Sorunlar\u0131n\u0131 \u00c7\u00f6zmek<\/h2>\n<p>WAF y\u00f6neticilerinin en b\u00fcy\u00fck kabusu &#8220;False Positive&#8221; yani yanl\u0131\u015f alarmlard\u0131r. Ger\u00e7ek bir m\u00fc\u015fteriniz sitenize yorum yaparken veya sepetine \u00fcr\u00fcn eklerken &#8220;403 Forbidden&#8221; hatas\u0131 al\u0131rsa, bu do\u011frudan ciro kayb\u0131 demektir.<\/p>\n<h3 id=\"audit-loglarini-denetim-gunlukleri-okumak\">Audit Loglar\u0131n\u0131 (Denetim G\u00fcnl\u00fckleri) Okumak<\/h3>\n<p>ModSecurity loglar\u0131 genellikle <code>\/var\/log\/apache2\/modsec_audit.log<\/code> veya Nginx i\u00e7in belirledi\u011finiz dizinde tutulur. Bir engelleme ya\u015fand\u0131\u011f\u0131nda log dosyas\u0131nda \u015funa benzer bir \u00e7\u0131kt\u0131 g\u00f6r\u00fcrs\u00fcn\u00fcz:<\/p>\n<pre><code class=\"language-text\">\r\nMessage: Access denied with code 403 (phase 2). Pattern match \"(?i)(insert|select|update|delete|drop)...\"\r\nAction: Intercepted (phase 2)\r\nRule ID: 942100\r\n<\/code><\/pre>\n<p>Buradaki en \u00f6nemli bilgi <strong>Rule ID: 942100<\/strong> k\u0131sm\u0131d\u0131r. Bu, hangi kural\u0131n tetiklendi\u011fini g\u00f6sterir.<\/p>\n<h3 id=\"kural-istisnasi-whitelist-olusturmak\">Kural \u0130stisnas\u0131 (Whitelist) Olu\u015fturmak<\/h3>\n<p>E\u011fer 942100 numaral\u0131 kural\u0131n sitenizdeki zarars\u0131z bir i\u015flemi engelledi\u011fini tespit ettiyseniz, bu kural\u0131 o spesifik URL veya parametre i\u00e7in devre d\u0131\u015f\u0131 b\u0131rakmal\u0131s\u0131n\u0131z. Custom kurallar\u0131n\u0131z\u0131 yazaca\u011f\u0131n\u0131z bir <code>.conf<\/code> dosyas\u0131 olu\u015fturup \u015fu komutu ekleyebilirsiniz:<\/p>\n<pre><code class=\"language-apache\">\r\n# Belirli bir URL i\u00e7in kural\u0131 devre d\u0131\u015f\u0131 b\u0131rakma\r\n&lt;LocationMatch \"\/wp-admin\/post.php\"&gt;\r\n    SecRuleRemoveById 942100\r\n&lt;\/LocationMatch&gt;\r\n<\/code><\/pre>\n<p>\u00d6zellikle <strong>WordPress Hosting<\/strong> kullan\u0131yorsan\u0131z, Elementor gibi sayfa olu\u015fturucular bol miktarda HTML ve JSON verisi g\u00f6nderdi\u011fi i\u00e7in s\u0131k s\u0131k WAF&#8217;a tak\u0131l\u0131r. Bu t\u00fcr durumlarda WordPress&#8217;e \u00f6zel CRS kural istisnalar\u0131n\u0131 (WordPress Exclusion Rules) aktif etmeniz gerekir.<\/p>\n<p>Ayn\u0131 durum otomasyon ara\u00e7lar\u0131 i\u00e7in de ge\u00e7erlidir. S\u00fcrekli API istekleri yapan Node.js uygulamalar\u0131n\u0131z WAF taraf\u0131ndan bot olarak alg\u0131lanabilir. Bu sorunlar\u0131 a\u015fmak i\u00e7in <strong>n8n &amp; Node.js Hosting<\/strong> \u00e7\u00f6z\u00fcmlerinde ModSecurity&#8217;nin API u\u00e7 noktalar\u0131 (endpoints) i\u00e7in nas\u0131l esnetilece\u011fini bilmek \u00f6nemlidir.<\/p>\n<h2 id=\"saviorhost-guvenlik\">SaviorHost Altyap\u0131s\u0131nda ModSecurity ve G\u00fcvenlik Avantajlar\u0131<\/h2>\n<p>T\u00fcm bu yap\u0131land\u0131rmalar\u0131 manuel olarak yapmak ciddi bir sistem y\u00f6neticili\u011fi (sysadmin) tecr\u00fcbesi gerektirir. \u00dcstelik kurallar\u0131 s\u00fcrekli g\u00fcncellemek, yeni \u00e7\u0131kan zafiyetlere kar\u015f\u0131 sistemi tetikte tutmak tam zamanl\u0131 bir i\u015ftir.<\/p>\n<p>\u0130\u015fte tam burada profesyonel bir altyap\u0131 sa\u011flay\u0131c\u0131s\u0131 ile \u00e7al\u0131\u015fman\u0131n fark\u0131 ortaya \u00e7\u0131kar. SaviorHost olarak, sundu\u011fumuz t\u00fcm Hosting ve <strong>Linux Reseller<\/strong> paketlerinde g\u00fcvenli\u011fi \u015fansa b\u0131rakm\u0131yoruz.<\/p>\n<h3 id=\"neden-saviorhost-altyapisi\">Neden SaviorHost Altyap\u0131s\u0131?<\/h3>\n<ul>\n<li><strong>AMD Ryzen 9 7900 G\u00fcc\u00fc:<\/strong> ModSecurity&#8217;nin her bir HTTP iste\u011fini derinlemesine analiz etmesi CPU g\u00fcc\u00fc gerektirir. Ryzen 9 i\u015flemcilerimiz sayesinde WAF aktifken bile sitenizde milisaniyelik bir gecikme ya\u015fanmaz. <strong>H\u0131zl\u0131 Hosting<\/strong> aray\u0131\u015f\u0131n\u0131z\u0131n kar\u015f\u0131l\u0131\u011f\u0131n\u0131 fazlas\u0131yla al\u0131rs\u0131n\u0131z.<\/li>\n<li><strong>KeyHelp Entegrasyonu:<\/strong> Karma\u015f\u0131k terminal komutlar\u0131yla u\u011fra\u015fmak yerine, KeyHelp kontrol panelimiz \u00fczerinden WAF ayarlar\u0131n\u0131z\u0131 g\u00f6rsel bir aray\u00fczle y\u00f6netebilir, loglar\u0131 kolayca okuyabilir ve tek t\u0131kla kural istisnalar\u0131 ekleyebilirsiniz.<\/li>\n<li><strong>\u00d6nceden Yap\u0131land\u0131r\u0131lm\u0131\u015f Kurallar:<\/strong> WordPress, PrestaShop veya OpenCart gibi pop\u00fcler altyap\u0131lar i\u00e7in False Positive oran\u0131n\u0131 s\u0131f\u0131ra indiren \u00f6zel kural setlerimiz sunucular\u0131m\u0131zda haz\u0131r olarak gelir.<\/li>\n<\/ul>\n<h2 id=\"sonuc\">Sonu\u00e7 ve G\u00fcvenli Gelecek<\/h2>\n<p>Web g\u00fcvenli\u011fi statik bir s\u00fcre\u00e7 de\u011fil, s\u00fcrekli devam eden bir kedi-fare oyunudur. Bu rehberimizde detayl\u0131ca inceledi\u011fimiz <strong>modsecurity nedir ve yapilandirmasi nasil yapilir 2026<\/strong> konsepti, sitenizin temel savunma hatt\u0131n\u0131 olu\u015fturur. Do\u011fru yap\u0131land\u0131r\u0131lm\u0131\u015f bir WAF; sizi veri s\u0131z\u0131nt\u0131lar\u0131ndan, itibar kayb\u0131ndan ve ciddi maddi zararlardan korur.<\/p>\n<p>Unutmay\u0131n, en iyi g\u00fcvenlik sistemi, varl\u0131\u011f\u0131n\u0131 hissettirmeden \u00e7al\u0131\u015fan sistemdir. Sitenizi yava\u015flatmadan, m\u00fc\u015fterilerinizi engellemeden maksimum koruma sa\u011flamak istiyorsan\u0131z, donan\u0131m ve yaz\u0131l\u0131m\u0131n m\u00fckemmel uyumuna ihtiyac\u0131n\u0131z var.<\/p>\n<p>Siz de s\u00fcrekli siber sald\u0131r\u0131 endi\u015fesi ta\u015f\u0131maktan yorulduysan\u0131z ve performansla g\u00fcvenli\u011fi ayn\u0131 anda sunan bir altyap\u0131ya ge\u00e7mek istiyorsan\u0131z, SaviorHost&#8217;un yeni nesil NVMe diskli ve Ryzen 9 i\u015flemcili <strong>Hosting<\/strong> \u00e7\u00f6z\u00fcmleriyle hemen tan\u0131\u015f\u0131n. Dijital varl\u0131klar\u0131n\u0131z\u0131 \u015fansa de\u011fil, sa\u011flam bir altyap\u0131ya emanet edin!<\/p>\n<hr \/>\n<h2 id=\"faq\">S\u0131k\u00e7a Sorulan Sorular (FAQ)<\/h2>\n<h3 id=\"modsecurity-ucretli-bir-yazilim-midir\">ModSecurity \u00fccretli bir yaz\u0131l\u0131m m\u0131d\u0131r?<\/h3>\n<p>Hay\u0131r, ModSecurity tamamen a\u00e7\u0131k kaynakl\u0131 ve \u00fccretsiz bir yaz\u0131l\u0131md\u0131r. Ancak, baz\u0131 geli\u015fmi\u015f ve ticari kural setleri (\u00f6rne\u011fin Trustwave&#8217;in sundu\u011fu \u00f6zel kurallar) \u00fccretli olabilir. \u00c7o\u011fu kullan\u0131c\u0131 i\u00e7in \u00fccretsiz olan OWASP Core Rule Set fazlas\u0131yla yeterlidir.<\/p>\n<h3 id=\"modsecurity-sitemi-yavaslatir-mi\">ModSecurity sitemi yava\u015flat\u0131r m\u0131?<\/h3>\n<p>E\u011fer sunucunuzun i\u015flemci (CPU) ve disk (I\/O) kapasitesi yetersizse, gelen her iste\u011fin analiz edilmesi sitenizde gecikmelere neden olabilir. Ancak NVMe SSD&#8217;ler ve g\u00fc\u00e7l\u00fc i\u015flemcilerle (\u00f6rn: Ryzen 9) desteklenen modern sunucularda ModSecurity&#8217;nin yaratt\u0131\u011f\u0131 gecikme milisaniyeler seviyesindedir ve kullan\u0131c\u0131 taraf\u0131ndan hissedilmez.<\/p>\n<h3 id=\"cloudflare-kullaniyorum-yine-de-modsecurity-kurmali-miyim\">Cloudflare kullan\u0131yorum, yine de ModSecurity kurmal\u0131 m\u0131y\u0131m?<\/h3>\n<p>Evet, kurman\u0131z \u015fiddetle tavsiye edilir. Cloudflare gibi CDN tabanl\u0131 WAF \u00e7\u00f6z\u00fcmleri harika bir ilk savunma hatt\u0131d\u0131r ancak sald\u0131rganlar sunucunuzun ger\u00e7ek IP adresini bulursa Cloudflare&#8217;i tamamen bypass edebilirler. Sunucu seviyesinde \u00e7al\u0131\u015fan ModSecurity, bu t\u00fcr &#8220;arkadan dola\u015fma&#8221; sald\u0131r\u0131lar\u0131na kar\u015f\u0131 son kaledir.<\/p>\n<h3 id=\"secruleengine-detectiononly-ne-kadar-sure-aktif-kalmali\">&#8220;SecRuleEngine DetectionOnly&#8221; ne kadar s\u00fcre aktif kalmal\u0131?<\/h3>\n<p>Sitenizin trafik yo\u011funlu\u011funa ba\u011fl\u0131 olarak genellikle 3 ila 7 g\u00fcn aras\u0131nda &#8220;DetectionOnly&#8221; modunda kalmas\u0131 \u00f6nerilir. Bu s\u00fcre zarf\u0131nda loglar\u0131 inceleyip sitenizin normal \u00e7al\u0131\u015fmas\u0131n\u0131 engelleyen kurallar\u0131 (false positives) tespit edip whitelist&#8217;e almal\u0131s\u0131n\u0131z. Ard\u0131ndan &#8220;On&#8221; moduna ge\u00e7ebilirsiniz.<\/p>\n<h3 id=\"wordpress-kullaniyorum-modsecurity-ayarlarinda-neye-dikkat-etmeliyim\">WordPress kullan\u0131yorum, ModSecurity ayarlar\u0131nda neye dikkat etmeliyim?<\/h3>\n<p>WordPress olduk\u00e7a dinamik bir yap\u0131ya sahiptir. \u00d6zellikle wp-admin paneli, REST API u\u00e7 noktalar\u0131 ve sayfa olu\u015fturucular (Elementor vb.) yo\u011fun veri g\u00f6nderir. OWASP CRS kurarken, paket i\u00e7inde gelen &#8220;WordPress Exclusion Rules&#8221; (WordPress \u0130stisna Kurallar\u0131) dosyas\u0131n\u0131 mutlaka aktif etmelisiniz, aksi takdirde admin panelinde s\u00fcrekli 403 hatalar\u0131 al\u0131rs\u0131n\u0131z.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>modsecurity nedir ve yapilandirmasi nasil yapilir 2026: Web Sunucunuzu Korumak \u0130\u00e7in 9 Kritik Ad\u0131m Gecenin bir yar\u0131s\u0131 telefonunuzun acil durum&#8230;<\/p>\n","protected":false},"author":1,"featured_media":2428,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[62],"tags":[],"class_list":["post-2423","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guvenlik"],"_links":{"self":[{"href":"https:\/\/saviorhost.com\/blog\/wp-json\/wp\/v2\/posts\/2423","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/saviorhost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/saviorhost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/saviorhost.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/saviorhost.com\/blog\/wp-json\/wp\/v2\/comments?post=2423"}],"version-history":[{"count":2,"href":"https:\/\/saviorhost.com\/blog\/wp-json\/wp\/v2\/posts\/2423\/revisions"}],"predecessor-version":[{"id":2429,"href":"https:\/\/saviorhost.com\/blog\/wp-json\/wp\/v2\/posts\/2423\/revisions\/2429"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/saviorhost.com\/blog\/wp-json\/wp\/v2\/media\/2428"}],"wp:attachment":[{"href":"https:\/\/saviorhost.com\/blog\/wp-json\/wp\/v2\/media?parent=2423"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/saviorhost.com\/blog\/wp-json\/wp\/v2\/categories?post=2423"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/saviorhost.com\/blog\/wp-json\/wp\/v2\/tags?post=2423"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}