{"id":1710,"date":"2025-11-11T19:58:15","date_gmt":"2025-11-11T16:58:15","guid":{"rendered":"https:\/\/www.dchost.com\/blog\/vpste-e%e2%80%91posta-sunucusu-kurulumu-postfix-dovecot-rspamd-ile-teslim-edilebilirlik-ve-ip-isitma-adim-adim\/"},"modified":"2025-11-11T19:58:15","modified_gmt":"2025-11-11T16:58:15","slug":"vpste-e%e2%80%91posta-sunucusu-kurulumu-postfix-dovecot-rspamd-ile-teslim-edilebilirlik-ve-ip-isitma-adim-adim","status":"publish","type":"post","link":"https:\/\/www.dchost.com\/blog\/vpste-e%e2%80%91posta-sunucusu-kurulumu-postfix-dovecot-rspamd-ile-teslim-edilebilirlik-ve-ip-isitma-adim-adim\/","title":{"rendered":"VPS\u2019te E\u2011posta Sunucusu Kurulumu: Postfix + Dovecot + rspamd ile Teslim Edilebilirlik ve IP Is\u0131tma Ad\u0131m Ad\u0131m"},"content":{"rendered":"<div class=\"dchost-blog-content-wrapper\"><div id=\"toc_container\" class=\"toc_transparent no_bullets\"><p class=\"toc_title\">\u0130&ccedil;indekiler<\/p><ul class=\"toc_list\"><li><a href=\"#Epostayi_Kendi_Evinde_Agirlamak_Neden_Ne_Zaman_Nasil\"><span class=\"toc_number toc_depth_1\">1<\/span> E\u2011postay\u0131 Kendi Evinde A\u011f\u0131rlamak: Neden, Ne Zaman, Nas\u0131l?<\/a><\/li><li><a href=\"#Yol_Haritasini_Cizelim_Temeller_DNS_ve_Ufak_Hazirliklar\"><span class=\"toc_number toc_depth_1\">2<\/span> Yol Haritas\u0131n\u0131 \u00c7izelim: Temeller, DNS ve Ufak Haz\u0131rl\u0131klar<\/a><ul><li><a href=\"#Once_alan_adi_ve_isimlendirme\"><span class=\"toc_number toc_depth_2\">2.1<\/span> \u00d6nce alan ad\u0131 ve isimlendirme<\/a><\/li><li><a href=\"#VPS_hazirligi_Saat_dogru_kapilar_kontrollu\"><span class=\"toc_number toc_depth_2\">2.2<\/span> VPS haz\u0131rl\u0131\u011f\u0131: Saat do\u011fru, kap\u0131lar kontroll\u00fc<\/a><\/li><\/ul><\/li><li><a href=\"#Postfix_ile_Gonderim_Sakin_Temiz_ve_Anlasilir_Bir_Kurgu\"><span class=\"toc_number toc_depth_1\">3<\/span> Postfix ile G\u00f6nderim: Sakin, Temiz ve Anla\u015f\u0131l\u0131r Bir Kurgu<\/a><ul><li><a href=\"#Kurulum_ve_temel_ayarlar\"><span class=\"toc_number toc_depth_2\">3.1<\/span> Kurulum ve temel ayarlar<\/a><\/li><\/ul><\/li><li><a href=\"#Dovecot_ile_IMAP_ve_Kimlik_Dogrulama_Postalari_Rahatca_Okumak\"><span class=\"toc_number toc_depth_1\">4<\/span> Dovecot ile IMAP ve Kimlik Do\u011frulama: Postalar\u0131 Rahat\u00e7a Okumak<\/a><ul><li><a href=\"#Kurulum_ve_temel_yapilandirma\"><span class=\"toc_number toc_depth_2\">4.1<\/span> Kurulum ve temel yap\u0131land\u0131rma<\/a><\/li><\/ul><\/li><li><a href=\"#rspamd_ile_Zirhi_Kusanmak_DKIM_DMARC_SPF_ve_Ince_Ayar\"><span class=\"toc_number toc_depth_1\">5<\/span> rspamd ile Z\u0131rh\u0131 Ku\u015fanmak: DKIM, DMARC, SPF ve \u0130nce Ayar<\/a><ul><li><a href=\"#Kurulum_ve_milter_baglama\"><span class=\"toc_number toc_depth_2\">5.1<\/span> Kurulum ve milter ba\u011flama<\/a><\/li><\/ul><\/li><li><a href=\"#Test_Gunlukler_ve_Kucuk_Zaferler_Ilk_Postayi_Ucuralim\"><span class=\"toc_number toc_depth_1\">6<\/span> Test, G\u00fcnl\u00fckler ve K\u00fc\u00e7\u00fck Zaferler: \u0130lk Postay\u0131 U\u00e7ural\u0131m<\/a><ul><li><a href=\"#Baglanti_ve_TLS_kontrolu\"><span class=\"toc_number toc_depth_2\">6.1<\/span> Ba\u011flant\u0131 ve TLS kontrol\u00fc<\/a><\/li><li><a href=\"#Loglari_okumayi_sevmek\"><span class=\"toc_number toc_depth_2\">6.2<\/span> Loglar\u0131 okumay\u0131 sevmek<\/a><\/li><\/ul><\/li><li><a href=\"#Teslim_Edilebilirlik_Spam_Fisiltisini_Susturmanin_Ince_Yolu\"><span class=\"toc_number toc_depth_1\">7<\/span> Teslim Edilebilirlik: Spam F\u0131s\u0131lt\u0131s\u0131n\u0131 Susturman\u0131n \u0130nce Yolu<\/a><ul><li><a href=\"#Itibar_dedigin_sey_duzenli_ve_sabirli_bir_akis\"><span class=\"toc_number toc_depth_2\">7.1<\/span> \u0130tibar dedi\u011fin \u015fey, d\u00fczenli ve sab\u0131rl\u0131 bir ak\u0131\u015f<\/a><\/li><li><a href=\"#Altyapi_duzeni_SPF_DKIM_DMARC_ve_rDNS_dortlusu\"><span class=\"toc_number toc_depth_2\">7.2<\/span> Altyap\u0131 d\u00fczeni: SPF, DKIM, DMARC ve rDNS d\u00f6rtl\u00fcs\u00fc<\/a><\/li><li><a href=\"#Itibar_panelleri_Olcmezsen_iyilestiremezsin\"><span class=\"toc_number toc_depth_2\">7.3<\/span> \u0130tibar panelleri: \u00d6l\u00e7mezsen iyile\u015ftiremezsin<\/a><\/li><\/ul><\/li><li><a href=\"#IP_Isitma_Kucuk_Adimlar_Temiz_Loglar_Tutarli_Rutin\"><span class=\"toc_number toc_depth_1\">8<\/span> IP Is\u0131tma: K\u00fc\u00e7\u00fck Ad\u0131mlar, Temiz Loglar, Tutarl\u0131 Rutin<\/a><ul><li><a href=\"#Gunun_plani_Az_ilgili_ve_ozenli\"><span class=\"toc_number toc_depth_2\">8.1<\/span> G\u00fcn\u00fcn plan\u0131: Az, ilgili ve \u00f6zenli<\/a><\/li><li><a href=\"#Hatalarla_baris_Soft_bounce_baska_hard_bounce_baska\"><span class=\"toc_number toc_depth_2\">8.2<\/span> Hatalarla bar\u0131\u015f: Soft bounce ba\u015fka, hard bounce ba\u015fka<\/a><\/li><\/ul><\/li><li><a href=\"#Guvenlik_ve_Saglamlik_Kapilari_Acik_Birakmadan_Misafir_Agirlamak\"><span class=\"toc_number toc_depth_1\">9<\/span> G\u00fcvenlik ve Sa\u011flaml\u0131k: Kap\u0131lar\u0131 A\u00e7\u0131k B\u0131rakmadan Misafir A\u011f\u0131rlamak<\/a><ul><li><a href=\"#UFW_Fail2ban_ve_basit_sinirlar\"><span class=\"toc_number toc_depth_2\">9.1<\/span> UFW, Fail2ban ve basit s\u0131n\u0131rlar<\/a><\/li><li><a href=\"#Hiz_ve_limitler_Abartma_ayarinda_kal\"><span class=\"toc_number toc_depth_2\">9.2<\/span> H\u0131z ve limitler: Abartma, ayar\u0131nda kal<\/a><\/li><\/ul><\/li><li><a href=\"#Sik_Karsilasilan_Tuzaklar_Yolda_Tas_Varsa_Erken_Fark_Edelim\"><span class=\"toc_number toc_depth_1\">10<\/span> S\u0131k Kar\u015f\u0131la\u015f\u0131lan Tuzaklar: Yolda Ta\u015f Varsa Erken Fark Edelim<\/a><ul><li><a href=\"#Port_25_kapaliysa\"><span class=\"toc_number toc_depth_2\">10.1<\/span> Port 25 kapal\u0131ysa<\/a><\/li><li><a href=\"#rDNS_ve_hostname_uyusmazligi\"><span class=\"toc_number toc_depth_2\">10.2<\/span> rDNS ve hostname uyu\u015fmazl\u0131\u011f\u0131<\/a><\/li><li><a href=\"#DMARC_raporlari_goz_ardi_edilirse\"><span class=\"toc_number toc_depth_2\">10.3<\/span> DMARC raporlar\u0131 g\u00f6z ard\u0131 edilirse<\/a><\/li><\/ul><\/li><li><a href=\"#Kucuk_Otomasyonlar_Ayni_Adimlari_Iki_Kez_Yazma\"><span class=\"toc_number toc_depth_1\">11<\/span> K\u00fc\u00e7\u00fck Otomasyonlar: Ayn\u0131 Ad\u0131mlar\u0131 \u0130ki Kez Yazma<\/a><ul><li><a href=\"#DNS_ve_altyapi_tekrarlari\"><span class=\"toc_number toc_depth_2\">11.1<\/span> DNS ve altyap\u0131 tekrarlar\u0131<\/a><\/li><\/ul><\/li><li><a href=\"#DNS_ve_Sertifikalar_Bir_Defa_Kur_Hep_Rahat_Et\"><span class=\"toc_number toc_depth_1\">12<\/span> DNS ve Sertifikalar: Bir Defa Kur, Hep Rahat Et<\/a><ul><li><a href=\"#Ornek_kayitlar\"><span class=\"toc_number toc_depth_2\">12.1<\/span> \u00d6rnek kay\u0131tlar<\/a><\/li><\/ul><\/li><li><a href=\"#Gercek_Dunyadan_Minik_Bir_Akis_Ilk_Haftanin_Ritmi\"><span class=\"toc_number toc_depth_1\">13<\/span> Ger\u00e7ek D\u00fcnyadan Minik Bir Ak\u0131\u015f: \u0130lk Haftan\u0131n Ritmi<\/a><ul><li><a href=\"#1_gun_Sade_test_kendine_mektup\"><span class=\"toc_number toc_depth_2\">13.1<\/span> 1. g\u00fcn: Sade test, kendine mektup<\/a><\/li><li><a href=\"#24_gun_Tanidik_halka_az_ama_duzenli\"><span class=\"toc_number toc_depth_2\">13.2<\/span> 2\u20134. g\u00fcn: Tan\u0131d\u0131k halka, az ama d\u00fczenli<\/a><\/li><li><a href=\"#57_gun_Icerigi_cesitlendirmek\"><span class=\"toc_number toc_depth_2\">13.3<\/span> 5\u20137. g\u00fcn: \u0130\u00e7eri\u011fi \u00e7e\u015fitlendirmek<\/a><\/li><\/ul><\/li><li><a href=\"#Sorun_Giderme_Birkac_Komut_Birkac_Puf\"><span class=\"toc_number toc_depth_1\">14<\/span> Sorun Giderme: Birka\u00e7 Komut, Birka\u00e7 P\u00fcf<\/a><ul><li><a href=\"#Cikis_testi_ve_icerik_basligi\"><span class=\"toc_number toc_depth_2\">14.1<\/span> \u00c7\u0131k\u0131\u015f testi ve i\u00e7erik ba\u015fl\u0131\u011f\u0131<\/a><\/li><\/ul><\/li><li><a href=\"#Kapanis_Evdeki_Firini_Isitmak\"><span class=\"toc_number toc_depth_1\">15<\/span> Kapan\u0131\u015f: Evdeki F\u0131r\u0131n\u0131 Is\u0131tmak<\/a><\/li><\/ul><\/div>\n<h2 id=\"section-1\"><span id=\"Epostayi_Kendi_Evinde_Agirlamak_Neden_Ne_Zaman_Nasil\">E\u2011postay\u0131 Kendi Evinde A\u011f\u0131rlamak: Neden, Ne Zaman, Nas\u0131l?<\/span><\/h2>\n<p>Hi\u00e7 ba\u015f\u0131n\u0131za geldi mi? \u00d6zenle yazd\u0131\u011f\u0131n\u0131z bir toplu duyuru, basit bir parola s\u0131f\u0131rlama postas\u0131 ya da m\u00fc\u015fteriye g\u00f6nderdi\u011finiz teklif\u2026 ve hop, kar\u015f\u0131 taraf\u0131n spam klas\u00f6r\u00fcne d\u00fc\u015f\u00fcyor. Bir sabah kahvemle otururken, k\u00fc\u00e7\u00fck bir ekibin e\u2011postalar\u0131 s\u00fcrekli spam\u2019e tak\u0131ld\u0131\u011f\u0131 i\u00e7in aylarca cevap alamad\u0131\u011f\u0131n\u0131 anlatt\u0131\u011f\u0131 an\u0131 hat\u0131rlad\u0131m. \u201cKendi sunucumuzu kursak?\u201d dediler. O anda i\u00e7imden ge\u00e7en netti: Kendi e\u2011posta sunucunu kurmak, biraz sab\u0131r ve do\u011fru ta\u015flar\u0131 yerine dizmek istiyor; ama bir kere oturunca, kontrol hissi parmaklar\u0131n\u0131n ucunda oluyor.<\/p>\n<p>Bu yaz\u0131da seni ad\u0131m ad\u0131m yan\u0131mda g\u00f6t\u00fcrece\u011fim. Bir <a href=\"https:\/\/www.dchost.com\/tr\/vps\">VPS<\/a> \u00fcst\u00fcnde <strong>Postfix<\/strong> ile g\u00f6nderimi, <strong>Dovecot<\/strong> ile IMAP\/POP taraf\u0131n\u0131, <strong>rspamd<\/strong> ile s\u00fczge\u00e7leri kuraca\u011f\u0131z. Sonra posta kabu\u011funun en kritik k\u0131sm\u0131na, yani <strong>teslim edilebilirlik<\/strong> ve <strong>IP \u0131s\u0131tma<\/strong> s\u00fcrecine dalaca\u011f\u0131z. DNS kay\u0131tlar\u0131ndan sertifikalara, loglardan k\u00fc\u00e7\u00fck test ipu\u00e7lar\u0131na kadar, ilk g\u00fcnden spam\u2019e saplanmadan ilerlemenin pratik yolunu konu\u015faca\u011f\u0131z. Mesela \u015f\u00f6yle d\u00fc\u015f\u00fcn: Bir f\u0131r\u0131n\u0131 ilk kez yak\u0131yorsun; \u0131s\u0131y\u0131 yava\u015f yava\u015f vermezsen ekmek kabarm\u0131yor. E\u2011posta IP\u2019si de buna benziyor; acele yok, d\u00fczenli ad\u0131mlar var.<\/p>\n<h2 id=\"section-2\"><span id=\"Yol_Haritasini_Cizelim_Temeller_DNS_ve_Ufak_Hazirliklar\">Yol Haritas\u0131n\u0131 \u00c7izelim: Temeller, DNS ve Ufak Haz\u0131rl\u0131klar<\/span><\/h2>\n<h3><span id=\"Once_alan_adi_ve_isimlendirme\">\u00d6nce alan ad\u0131 ve isimlendirme<\/span><\/h3>\n<p>Bir e\u2011posta sunucusunun kimli\u011fi \u00f6ncelikle alan ad\u0131nla ba\u015flar. \u201cmail.example.com\u201d gibi net bir <strong>A kayd\u0131<\/strong> olu\u015ftur, sonra alan ad\u0131n\u0131n <strong>MX kayd\u0131n\u0131<\/strong> bu host\u2019a y\u00f6nlendir. Sunucu sa\u011flay\u0131c\u0131ndan <strong>rDNS\/PTR<\/strong> kayd\u0131n\u0131 da \u201cmail.example.com\u201d olarak ayarlamas\u0131n\u0131 iste. Bu \u00fc\u00e7l\u00fc, posta d\u00fcnyas\u0131nda \u201cmerhaba\u201d dedi\u011fin ilk saniyeyi belirliyor. Ard\u0131ndan <strong>SPF<\/strong>, <strong>DKIM<\/strong> ve <strong>DMARC<\/strong> kay\u0131tlar\u0131yla kimlik kart\u0131n\u0131 tamamlayaca\u011f\u0131z.<\/p>\n<h3><span id=\"VPS_hazirligi_Saat_dogru_kapilar_kontrollu\">VPS haz\u0131rl\u0131\u011f\u0131: Saat do\u011fru, kap\u0131lar kontroll\u00fc<\/span><\/h3>\n<p>Sunucuda saat dilimi ve NTP senkronu d\u00fczg\u00fcn olsun; loglar\u0131 okurken zaman kaymas\u0131 insan\u0131 yorar. G\u00fcvenlik duvar\u0131nda 22 (SSH), 25 (SMTP), 587 (Submission) ve 993 (IMAPS) portlar\u0131n\u0131 a\u00e7. \u0130lk kurulumda i\u015fi yal\u0131n tutmak iyi gelir. Daha sonra fail2ban ile kaba kuvvet denemelerini t\u00f6rp\u00fcleriz. Bu arada, tekrar \u00fcretilebilir kurulumlar istemiyorsan bile bir g\u00fcn gerekecek; buna <a href=\"https:\/\/www.dchost.com\/blog\/bulutun-ilk-nefesi-cloud%E2%80%91init-ve-ansible-ile-tekrar-uretilebilir-vps-nasil-kurulur\/\">cloud\u2011init ve Ansible ile tekrar \u00fcretilebilir VPS kurulumunu<\/a> anlatt\u0131\u011f\u0131m yaz\u0131y\u0131 b\u0131rak\u0131yorum, g\u00fcn gelir \u201ciyi ki\u201d dersin.<\/p>\n<h2 id=\"section-3\"><span id=\"Postfix_ile_Gonderim_Sakin_Temiz_ve_Anlasilir_Bir_Kurgu\">Postfix ile G\u00f6nderim: Sakin, Temiz ve Anla\u015f\u0131l\u0131r Bir Kurgu<\/span><\/h2>\n<h3><span id=\"Kurulum_ve_temel_ayarlar\">Kurulum ve temel ayarlar<\/span><\/h3>\n<p>Ubuntu\/Debian gibi bir da\u011f\u0131t\u0131mda kurulum h\u0131zl\u0131ca \u015f\u00f6yle ba\u015flar:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo apt update\nsudo apt install postfix\n<\/code><\/pre>\n<p>Kurulum sihirbaz\u0131nda \u201cInternet Site\u201d se\u00e7ip \u201cmail.example.com\u201d ad\u0131n\u0131 ver. Ard\u0131ndan a\u015fa\u011f\u0131daki <strong>\/etc\/postfix\/main.cf<\/strong> iskeleti, ilk ad\u0131mdan ta\u015flar\u0131 yerine oturtur:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">myhostname = mail.example.com\nmydomain = example.com\nmyorigin = \/etc\/mailname\nsmtpd_banner = $myhostname ESMTP\nbiff = no\nappend_dot_mydomain = no\nreadme_directory = no\ncompatibility_level = 2\n\ninet_interfaces = all\ninet_protocols = ipv4\nmydestination = $myhostname, localhost.$mydomain, localhost\nmynetworks = 127.0.0.0\/8 [::1]\/128\nrelayhost =\n\n# Maildir teslimi\nhome_mailbox = Maildir\/\nrecipient_delimiter = +\n\n# TLS\nsmtpd_tls_cert_file = \/etc\/letsencrypt\/live\/mail.example.com\/fullchain.pem\nsmtpd_tls_key_file  = \/etc\/letsencrypt\/live\/mail.example.com\/privkey.pem\nsmtpd_tls_security_level = may\nsmtp_tls_security_level  = may\nsmtpd_tls_auth_only = yes\n\n# SASL (Dovecot)\nsmtpd_sasl_type = dovecot\nsmtpd_sasl_path = private\/auth\nsmtpd_sasl_auth_enable = yes\n\n# Temel politikalar\nsmtpd_helo_required = yes\nsmtpd_helo_restrictions = reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname\nsmtpd_recipient_restrictions = \n    permit_sasl_authenticated,\n    permit_mynetworks,\n    reject_unauth_destination\n\n# rspamd milter\nmilter_default_action = accept\nmilter_protocol = 6\nsmtpd_milters = inet:127.0.0.1:11332\nnon_smtpd_milters = $smtpd_milters\n<\/code><\/pre>\n<p>Submission (587) portu son kullan\u0131c\u0131 i\u00e7in can damar\u0131. Bu y\u00fczden <strong>\/etc\/postfix\/master.cf<\/strong> i\u00e7ine uygun sat\u0131rlar\u0131 ekleyelim:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">submission inet n       -       y       -       -       smtpd\n  -o syslog_name=postfix\/submission\n  -o smtpd_tls_security_level=encrypt\n  -o smtpd_sasl_auth_enable=yes\n  -o smtpd_client_restrictions=permit_sasl_authenticated,reject\n  -o milter_macro_daemon_name=ORIGINATING\n<\/code><\/pre>\n<p>Buradaki \u201cencrypt\u201d seviyesi, 587 \u00fczerinden gelen istemcilerin \u015fifreli ba\u011flant\u0131 kurmas\u0131n\u0131 \u015fart ko\u015fuyor. K\u00fc\u00e7\u00fck ama kritik bir dokunu\u015f. Bu noktada Let\u2019s Encrypt sertifikalar\u0131 edinmek i\u00e7in k\u0131sa bir nefeslik dura\u011f\u0131 hak ediyoruz. Web sunucun yoksa bile <em>standalone<\/em> modda sertifika alabilirsin; sonra Postfix ve Dovecot\u2019a g\u00f6sterece\u011fiz.<\/p>\n<h2 id=\"section-4\"><span id=\"Dovecot_ile_IMAP_ve_Kimlik_Dogrulama_Postalari_Rahatca_Okumak\">Dovecot ile IMAP ve Kimlik Do\u011frulama: Postalar\u0131 Rahat\u00e7a Okumak<\/span><\/h2>\n<h3><span id=\"Kurulum_ve_temel_yapilandirma\">Kurulum ve temel yap\u0131land\u0131rma<\/span><\/h3>\n<p>Dovecot taraf\u0131 iki i\u015fi s\u0131rtl\u0131yor: IMAP\/POP hizmeti ve Postfix\u2019e kimlik do\u011frulama. Kurulum basit:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo apt install dovecot-core dovecot-imapd dovecot-lmtpd<\/code><\/pre>\n<p>Ard\u0131ndan temel ayarlar\u0131 yapal\u0131m. <strong>\/etc\/dovecot\/dovecot.conf<\/strong> ve ilgili dosyalarda \u015fu iskelet i\u015f g\u00f6r\u00fcr:<\/p>\n<pre class=\"language-nginx line-numbers\"><code class=\"language-nginx\">protocols = imap lmtp\nmail_location = maildir:~\/Maildir\n\nssl = required\nssl_cert = &lt;\/etc\/letsencrypt\/live\/mail.example.com\/fullchain.pem\nssl_key  = &lt;\/etc\/letsencrypt\/live\/mail.example.com\/privkey.pem\n\nauth_mechanisms = plain login\n\npassdb {\n  driver = pam\n}\nuserdb {\n  driver = passwd\n}\n\nservice auth {\n  unix_listener \/var\/spool\/postfix\/private\/auth {\n    mode = 0660\n    user = postfix\n    group = postfix\n  }\n}\n<\/code><\/pre>\n<p>Bu kurgu, sistem kullan\u0131c\u0131lar\u0131yla basit bir \u015fekilde ba\u015flamak i\u00e7in yeterli. Maildir dizinleri \u201c~\/Maildir\u201d alt\u0131nda olu\u015fur, IMAP istemcileri (Thunderbird, Apple Mail gibi) hemen ba\u011flanabilir. Bir nefes al\u0131p \u201cilk e\u2011posta\u201dy\u0131 atmaya haz\u0131r\u0131z.<\/p>\n<h2 id=\"section-5\"><span id=\"rspamd_ile_Zirhi_Kusanmak_DKIM_DMARC_SPF_ve_Ince_Ayar\">rspamd ile Z\u0131rh\u0131 Ku\u015fanmak: DKIM, DMARC, SPF ve \u0130nce Ayar<\/span><\/h2>\n<h3><span id=\"Kurulum_ve_milter_baglama\">Kurulum ve milter ba\u011flama<\/span><\/h3>\n<p>rspamd, hafif ama g\u00fc\u00e7l\u00fc bir s\u00fczge\u00e7. Kurulumdan sonra Postfix milter\u2019\u0131na ba\u011flan\u0131nca hem i\u00e7erik skorlama yapar, hem de DKIM\/ARC gibi imzalar\u0131 olu\u015fturabilir. Ubuntu\/Debian\u2019da:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo apt install rspamd redis-server\nsudo systemctl enable --now rspamd redis-server\n<\/code><\/pre>\n<p>Postfix taraf\u0131nda milter\u2019\u0131 zaten main.cf\u2019e ekledik. \u015eimdi DKIM\u2019i a\u00e7al\u0131m. <strong>\/etc\/rspamd\/local.d\/dkim_signing.conf<\/strong> i\u00e7ine:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">domain { example.com { selector = default; path = &quot;\/var\/lib\/rspamd\/dkim\/example.com.key&quot;; } }\nuse_domain = sign;\nallow_envfrom = true;\nsigning_table = &quot;*&quot;;\n<\/code><\/pre>\n<p>\u00d6nce anahtar \u00fcretelim ve izinleri s\u0131k\u0131 tutal\u0131m:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo mkdir -p \/var\/lib\/rspamd\/dkim\nsudo rspamadm dkim_keygen -b 2048 -s default -d example.com -k \/var\/lib\/rspamd\/dkim\/example.com.key \n  | sudo tee \/var\/lib\/rspamd\/dkim\/default.example.com.txt\nsudo chown -R _rspamd:_rspamd \/var\/lib\/rspamd\/dkim\nsudo chmod 600 \/var\/lib\/rspamd\/dkim\/example.com.key\n<\/code><\/pre>\n<p>Komut \u00e7\u0131kt\u0131s\u0131ndaki TXT kayd\u0131n\u0131 DNS\u2019e ekle. Kay\u0131t ad\u0131 genellikle <strong>default._domainkey.example.com<\/strong> olur. Ard\u0131ndan basit bir <strong>SPF<\/strong> ve <strong>DMARC<\/strong> \u00e7izelgesi kural\u0131m:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\"># SPF (TXT)\nexample.com. IN TXT &quot;v=spf1 mx a:mail.example.com ~all&quot;\n\n# DMARC (TXT)\n_dmarc.example.com. IN TXT &quot;v=DMARC1; p=none; rua=mailto:dmarc@example.com; fo=1&quot;\n<\/code><\/pre>\n<p>\u0130lk g\u00fcnlerde DMARC \u201cp=none\u201d ile g\u00f6zlemli modda kals\u0131n; raporlar\u0131 izleyerek s\u0131k\u0131la\u015ft\u0131rma ad\u0131m\u0131n\u0131 sonra atar\u0131z. DMARC taraf\u0131nda daha ileri konular\u0131, BIMI d\u00e2hil, ba\u015fka bir g\u00fcn\u00fcn kahvesine saklad\u0131m; yine de merakl\u0131s\u0131na <a href=\"https:\/\/www.dchost.com\/blog\/gelismis-dmarc-ve-bimi-rua-ruf-raporlarindan-marka-gostergesine-nasil-yol-alinir\/\">DMARC raporlar\u0131ndan BIMI\u2019ye uzanan bu derinle\u015fme rehberini<\/a> b\u0131rak\u0131yorum.<\/p>\n<h2 id=\"section-6\"><span id=\"Test_Gunlukler_ve_Kucuk_Zaferler_Ilk_Postayi_Ucuralim\">Test, G\u00fcnl\u00fckler ve K\u00fc\u00e7\u00fck Zaferler: \u0130lk Postay\u0131 U\u00e7ural\u0131m<\/span><\/h2>\n<h3><span id=\"Baglanti_ve_TLS_kontrolu\">Ba\u011flant\u0131 ve TLS kontrol\u00fc<\/span><\/h3>\n<p>Sunucu konu\u015fuyor mu, \u00f6nce buna bakal\u0131m. Submission portu i\u00e7in basit bir STARTTLS testi:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">openssl s_client -starttls smtp -connect mail.example.com:587 -servername mail.example.com<\/code><\/pre>\n<p>Ba\u011flant\u0131 kuruluyor, sertifika do\u011fru g\u00f6r\u00fcn\u00fcyor mu? Tamamsa ilk e\u2011postay\u0131 kendine g\u00f6nder. E\u011fer ara ara \u201crelay access denied\u201d veya \u201cauthentication failed\u201d gibi hatalar al\u0131rsan, genelde k\u00fc\u00e7\u00fck bir yap\u0131land\u0131rma noktas\u0131 g\u00f6zden ka\u00e7m\u0131\u015ft\u0131r. Kimlik do\u011frulaman\u0131n Dovecot \u00fczerinden akt\u0131\u011f\u0131n\u0131, 587\u2019nin \u015fifreli zorunlu oldu\u011funu hat\u0131rla.<\/p>\n<h3><span id=\"Loglari_okumayi_sevmek\">Loglar\u0131 okumay\u0131 sevmek<\/span><\/h3>\n<p>Postfix ve Dovecot loglar\u0131 insana \u00e7ok \u015fey f\u0131s\u0131ldar. Ben \u00e7o\u011fu sorunu <strong>\/var\/log\/mail.log<\/strong> ve <strong>\/var\/log\/syslog<\/strong> ikilisinde \u00e7\u00f6zd\u00fcm. \u0130\u00e7erik skorunu ve DKIM imzas\u0131n\u0131 do\u011frulamak i\u00e7in bir test servisine de g\u00f6z atabilirsin; \u00f6rne\u011fin <a href=\"https:\/\/www.mail-tester.com\/\" rel=\"nofollow noopener\" target=\"_blank\">mail\u2011tester ile i\u00e7erik ve yap\u0131 puan\u0131n\u0131 g\u00f6rmek<\/a> bazen tek bak\u0131\u015fta \u0131\u015f\u0131\u011f\u0131 yakar.<\/p>\n<h2 id=\"section-7\"><span id=\"Teslim_Edilebilirlik_Spam_Fisiltisini_Susturmanin_Ince_Yolu\">Teslim Edilebilirlik: Spam F\u0131s\u0131lt\u0131s\u0131n\u0131 Susturman\u0131n \u0130nce Yolu<\/span><\/h2>\n<h3><span id=\"Itibar_dedigin_sey_duzenli_ve_sabirli_bir_akis\">\u0130tibar dedi\u011fin \u015fey, d\u00fczenli ve sab\u0131rl\u0131 bir ak\u0131\u015f<\/span><\/h3>\n<p>E\u2011postada itibar, bir gecede in\u015fa olmuyor. Yeni bir IP ise, onu yava\u015f\u00e7a \u0131s\u0131tmak gerekiyor. \u0130lk g\u00fcnlerde, ger\u00e7ekten e\u2011postan\u0131 bekleyen, senden duymaya al\u0131\u015f\u0131k bir al\u0131c\u0131 grubuna g\u00f6nder. Bu, al\u0131c\u0131 taraf davran\u0131\u015flar\u0131na olumlu sinyal verir; a\u00e7\u0131lma ve etkile\u015fim ba\u015f\u0131 s\u0131vazlar. Sonra hacmi \u00e7ok yava\u015f b\u00fcy\u00fct. H\u0131zl\u0131 z\u0131plamalar, hele hele bir anda kal\u0131n bir liste, hemen duvar \u00f6rer. Mesela \u015f\u00f6yle d\u00fc\u015f\u00fcn: \u0130lk hafta nazik bir y\u00fcr\u00fcy\u00fc\u015f, ikinci hafta tempolu ad\u0131m; ko\u015fu ileride.<\/p>\n<h3><span id=\"Altyapi_duzeni_SPF_DKIM_DMARC_ve_rDNS_dortlusu\">Altyap\u0131 d\u00fczeni: SPF, DKIM, DMARC ve rDNS d\u00f6rtl\u00fcs\u00fc<\/span><\/h3>\n<p>DNS taraf\u0131nda SPF\/DKIM\/DMARC temiz, rDNS birebir e\u015fle\u015fmi\u015f olsun. G\u00f6nderen alan ad\u0131nla DKIM\u2019inin \u201cd=\u201d alan\u0131 uyumlu kals\u0131n. \u201cFrom\u201d ve \u201cReturn\u2011Path\u201d da\u011f\u0131lmas\u0131n. Bu k\u00fc\u00e7\u00fck detay\u0131 ihmal eden \u00e7ok olur, sonra \u201cneden spam?\u201d diye sorarlar. Bir de i\u00e7erik taraf\u0131nda sade ve net olmay\u0131 unutma; gereksiz link \u00e7oklu\u011fu, garip ekler, tek g\u00f6rselden ibaret postalar risklidir.<\/p>\n<h3><span id=\"Itibar_panelleri_Olcmezsen_iyilestiremezsin\">\u0130tibar panelleri: \u00d6l\u00e7mezsen iyile\u015ftiremezsin<\/span><\/h3>\n<p>G\u00f6nderen sa\u011fl\u0131\u011f\u0131n\u0131 izlemek i\u00e7in <a href=\"https:\/\/postmaster.google.com\/\" rel=\"nofollow noopener\" target=\"_blank\">Gmail Postmaster Tools \u00fczerinden g\u00f6nderen itibar\u0131n\u0131z\u0131 izlemek<\/a> g\u00fczel bir ba\u015flang\u0131\u00e7. Microsoft taraf\u0131nda ise <a href=\"https:\/\/sendersupport.olc.protection.outlook.com\/snds\/\" rel=\"nofollow noopener\" target=\"_blank\">Microsoft\u2019un SNDS panelinden IP sa\u011fl\u0131\u011f\u0131n\u0131 kontrol etmek<\/a> yol g\u00f6sterir. Buralar, geri bildirim d\u00f6ng\u00fcleri ve istenmeyen posta \u015fikayetleri gibi sinyalleri \u00f6n\u00fcne koyar. Kap\u0131da bek\u00e7isi \u00e7ok olan mahalledeyiz; kom\u015fular ne diyor, duymak laz\u0131m.<\/p>\n<h2 id=\"section-8\"><span id=\"IP_Isitma_Kucuk_Adimlar_Temiz_Loglar_Tutarli_Rutin\">IP Is\u0131tma: K\u00fc\u00e7\u00fck Ad\u0131mlar, Temiz Loglar, Tutarl\u0131 Rutin<\/span><\/h2>\n<h3><span id=\"Gunun_plani_Az_ilgili_ve_ozenli\">G\u00fcn\u00fcn plan\u0131: Az, ilgili ve \u00f6zenli<\/span><\/h3>\n<p>IP \u0131s\u0131n\u0131rken en sevdi\u011fim kural \u015fu: Az g\u00f6nder, ilgili g\u00f6nder, tutarl\u0131 g\u00f6nder. Her g\u00fcn ayn\u0131 saatlerde k\u00fc\u00e7\u00fck partiler. \u0130lk halka ger\u00e7ek kullan\u0131c\u0131lar\u0131n oldu\u011fu, seninle ileti\u015fim kurmay\u0131 bekleyen adresler. Geri d\u00f6n\u00fc\u015f alamad\u0131\u011f\u0131n bir grubu \u0131srarla zorlamamak, liste sa\u011fl\u0131\u011f\u0131n\u0131 korur. T\u0131pk\u0131 spor yaparken eklem saklamayan ritim gibi; tutarl\u0131l\u0131k b\u00fct\u00fcn i\u015fi de\u011fi\u015ftirir.<\/p>\n<h3><span id=\"Hatalarla_baris_Soft_bounce_baska_hard_bounce_baska\">Hatalarla bar\u0131\u015f: Soft bounce ba\u015fka, hard bounce ba\u015fka<\/span><\/h3>\n<p>Geri d\u00f6nen postalar ikiye ayr\u0131l\u0131r. Sunucu me\u015fgul gibi ge\u00e7ici nedenler \u201csoft bounce\u201d der; sonra tekrar deneyebilir. \u201cB\u00f6yle bir adres yok\u201d gibi kal\u0131c\u0131 nedenler \u201chard bounce\u201d olur; bu adresi listeden \u00e7\u0131kar. Bu ayr\u0131m\u0131 d\u00fczg\u00fcn y\u00f6netmek, itibar\u0131n can simidi. rspamd ve Postfix loglar\u0131 zaten neyin ne oldu\u011funu s\u00f6yler; bir de \u201cnedenleri not alay\u0131m\u201d dersen, kendi k\u00fc\u00e7\u00fck \u0131s\u0131tma g\u00fcnl\u00fc\u011f\u00fcn olsun, ileride \u00e7ok i\u015f g\u00f6r\u00fcr.<\/p>\n<h2 id=\"section-9\"><span id=\"Guvenlik_ve_Saglamlik_Kapilari_Acik_Birakmadan_Misafir_Agirlamak\">G\u00fcvenlik ve Sa\u011flaml\u0131k: Kap\u0131lar\u0131 A\u00e7\u0131k B\u0131rakmadan Misafir A\u011f\u0131rlamak<\/span><\/h2>\n<h3><span id=\"UFW_Fail2ban_ve_basit_sinirlar\">UFW, Fail2ban ve basit s\u0131n\u0131rlar<\/span><\/h3>\n<p>G\u00fcvenlik duvar\u0131nda sadece ihtiyac\u0131n olan portlar a\u00e7\u0131k kals\u0131n. 587 ve 993 d\u0131\u015f d\u00fcnya i\u00e7in, 25 ise MTA\u2019lar aras\u0131 konu\u015fma i\u00e7in dursun. Kaba kuvvet giri\u015fimlerini t\u00f6rp\u00fclemek i\u00e7in fail2ban eklemek iyi fikirdir. Bunu kurarken ipu\u00e7lar\u0131 ararsan, <a href=\"https:\/\/www.dchost.com\/blog\/wordpress-guvenlik-sertlestirme-kontrol-listesi-dosya-izinleri-salt-keys-xml-rpc-ufw-fail2ban-nasil-tatli-tatli-kurulur\/\">UFW ve Fail2ban\u2019\u0131 tatl\u0131 tatl\u0131 kurma \u00fczerine bu g\u00fcvenlik rehberindeki p\u00fcf noktalar\u0131n\u0131<\/a> sevebilirsin; konu WordPress diye ge\u00e7me, sistem taraf\u0131 ayn\u0131d\u0131r.<\/p>\n<h3><span id=\"Hiz_ve_limitler_Abartma_ayarinda_kal\">H\u0131z ve limitler: Abartma, ayar\u0131nda kal<\/span><\/h3>\n<p>Postfix\u2019in k\u00fc\u00e7\u00fck limitleri bazen hayat kurtar\u0131r. Bir istemcinin \u00e7ok h\u0131zl\u0131 \u00e7ok mail atmas\u0131n\u0131 sevmeyiz. A\u015f\u0131r\u0131 u\u00e7larda kalmadan, ritmi yumu\u015fatmak i\u00e7in \u015fu fikirler cebinde dursun: \u201canvil\u201d s\u00fcre birimiyle saniyeyi b\u00fcy\u00fctmek, istemci ba\u015f\u0131na mesaj limitini ufak tutmak, bir anda ba\u011flant\u0131 say\u0131s\u0131n\u0131 k\u0131smak. Hepsi ayr\u0131 birer emniyet supab\u0131 gibi \u00e7al\u0131\u015f\u0131r. Hacim b\u00fcy\u00fcd\u00fc\u011f\u00fcnde ger\u00e7ek hayatta \u201cbunu biraz k\u0131sal\u0131m\u201d dedi\u011fin ilk nokta buras\u0131 oluyor.<\/p>\n<h2 id=\"section-10\"><span id=\"Sik_Karsilasilan_Tuzaklar_Yolda_Tas_Varsa_Erken_Fark_Edelim\">S\u0131k Kar\u015f\u0131la\u015f\u0131lan Tuzaklar: Yolda Ta\u015f Varsa Erken Fark Edelim<\/span><\/h2>\n<h3><span id=\"Port_25_kapaliysa\">Port 25 kapal\u0131ysa<\/span><\/h3>\n<p>Baz\u0131 sa\u011flay\u0131c\u0131lar port 25\u2019i kapat\u0131r. Bu durumda giden posta i\u00e7in bir SMTP relay kullanabilirsin; ya da sa\u011flay\u0131c\u0131 deste\u011fine ula\u015f\u0131p a\u00e7t\u0131rmay\u0131 denersin. Relay kullan\u0131rken DKIM\/DMARC hizalamas\u0131n\u0131 korumaya dikkat et, yoksa kendi do\u011frulamalar\u0131n\u0131n faydas\u0131n\u0131 g\u00f6remeyebilirsin.<\/p>\n<h3><span id=\"rDNS_ve_hostname_uyusmazligi\">rDNS ve hostname uyu\u015fmazl\u0131\u011f\u0131<\/span><\/h3>\n<p>G\u00f6nderici IP\u2019nin rDNS\u2019i \u201cmail.example.com\u201d de\u011filse ya da host ad\u0131nla \u00e7at\u0131\u015f\u0131yorsa, bir\u00e7ok al\u0131c\u0131 kap\u0131dan \u00e7evirir. Sa\u011flay\u0131c\u0131 panelinden rDNS\u2019i d\u00fczeltmek \u00e7o\u011fu zaman tek t\u0131k. Sonra bir test postas\u0131 at, logda \u201creverse mapping\u201d itirazlar\u0131n\u0131n susup susmad\u0131\u011f\u0131n\u0131 g\u00f6r.<\/p>\n<h3><span id=\"DMARC_raporlari_goz_ardi_edilirse\">DMARC raporlar\u0131 g\u00f6z ard\u0131 edilirse<\/span><\/h3>\n<p>Raporlar bazen s\u0131k\u0131c\u0131 g\u00f6r\u00fcn\u00fcr ama orada alt\u0131n var. Hangi alt alan adlar\u0131 nas\u0131l davranm\u0131\u015f, DKIM nerede patinaj \u00e7ekmi\u015f, hepsi \u00e7\u0131kar. Bu raporlar\u0131 yol haritas\u0131na d\u00f6n\u00fc\u015ft\u00fcrmeden \u201cp=reject\u201d demek cesaret ister. Aceleye gerek yok; \u00f6nce g\u00f6zlem, sonra s\u0131k\u0131la\u015ft\u0131rma. Tekrar hat\u0131rlatay\u0131m, ayr\u0131nt\u0131 merakl\u0131s\u0131na <a href=\"https:\/\/www.dchost.com\/blog\/gelismis-dmarc-ve-bimi-rua-ruf-raporlarindan-marka-gostergesine-nasil-yol-alinir\/\">DMARC ve BIMI \u00fczerine ad\u0131m ad\u0131m bir rehber<\/a> var.<\/p>\n<h2 id=\"section-11\"><span id=\"Kucuk_Otomasyonlar_Ayni_Adimlari_Iki_Kez_Yazma\">K\u00fc\u00e7\u00fck Otomasyonlar: Ayn\u0131 Ad\u0131mlar\u0131 \u0130ki Kez Yazma<\/span><\/h2>\n<h3><span id=\"DNS_ve_altyapi_tekrarlari\">DNS ve altyap\u0131 tekrarlar\u0131<\/span><\/h3>\n<p>Her yeni alan ad\u0131nda ayn\u0131 SPF\/DKIM\/DMARC kay\u0131tlar\u0131n\u0131 elle yazmak bir s\u00fcre sonra ba\u015fa bela olur. \u201cKodla y\u00f6net, h\u0131zl\u0131 ya\u015fa\u201d mant\u0131\u011f\u0131n\u0131 seviyorsan, <a href=\"https:\/\/www.dchost.com\/blog\/terraform-ile-vps-ve-dns-otomasyonu-cloudflare-proxmox-openstack-ve-sifir-kesinti-dagitim-nasil-bir-araya-gelir\/\">Terraform ile VPS ve DNS otomasyonu<\/a> tam arad\u0131\u011f\u0131n \u015fey olabilir. Bir kez \u015fablonlay\u0131p, yeni projelerde tekrar tekrar \u00e7a\u011f\u0131r\u0131rs\u0131n. Sunucu taraf\u0131nda da <a href=\"https:\/\/www.dchost.com\/blog\/bulutun-ilk-nefesi-cloud%E2%80%91init-ve-ansible-ile-tekrar-uretilebilir-vps-nasil-kurulur\/\">cloud\u2011init ve Ansible ile tekrar \u00fcretilebilir VPS<\/a> yakla\u015f\u0131m\u0131, Postfix\/Dovecot\/rspamd \u00fc\u00e7l\u00fcs\u00fcn\u00fc \u201coynat\u201d demeye kadar getirir.<\/p>\n<h2 id=\"section-12\"><span id=\"DNS_ve_Sertifikalar_Bir_Defa_Kur_Hep_Rahat_Et\">DNS ve Sertifikalar: Bir Defa Kur, Hep Rahat Et<\/span><\/h2>\n<h3><span id=\"Ornek_kayitlar\">\u00d6rnek kay\u0131tlar<\/span><\/h3>\n<p>\u00d6zet mahiyetinde, bir alan ad\u0131 i\u00e7in \u015fu \u00f6rnekleri d\u00fc\u015f\u00fcnebilirsin:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\"># A kayd\u0131\nmail.example.com. IN A 203.0.113.10\n\n# MX kayd\u0131\nexample.com. IN MX 10 mail.example.com.\n\n# PTR\/rDNS (sa\u011flay\u0131c\u0131 panelinden): 203.0.113.10 -&gt; mail.example.com\n\n# SPF (TXT)\nexample.com. IN TXT &quot;v=spf1 mx a:mail.example.com ~all&quot;\n\n# DKIM (TXT)\ndefault._domainkey.example.com. IN TXT &quot;v=DKIM1; k=rsa; p=...&quot;\n\n# DMARC (TXT)\n_dmarc.example.com. IN TXT &quot;v=DMARC1; p=none; rua=mailto:dmarc@example.com; fo=1&quot;\n<\/code><\/pre>\n<p>Sertifikada Let\u2019s Encrypt i\u015fini severim; yenileme otomatik olur. Web sunucun yoksa bile standalone veya DNS do\u011frulamayla alabilirsin. Dovecot ve Postfix\u2019e ayn\u0131 sertifikay\u0131 g\u00f6sterdi\u011finde, istemcilerin \u201cg\u00fcven\u201d \u0131\u015f\u0131\u011f\u0131n\u0131 hemen yakar.<\/p>\n<h2 id=\"section-13\"><span id=\"Gercek_Dunyadan_Minik_Bir_Akis_Ilk_Haftanin_Ritmi\">Ger\u00e7ek D\u00fcnyadan Minik Bir Ak\u0131\u015f: \u0130lk Haftan\u0131n Ritmi<\/span><\/h2>\n<h3><span id=\"1_gun_Sade_test_kendine_mektup\">1. g\u00fcn: Sade test, kendine mektup<\/span><\/h3>\n<p>\u00d6nce kendine, farkl\u0131 al\u0131c\u0131 kutular\u0131na (ki\u015fisel, i\u015f, bir iki \u00fccretsiz servis) k\u00fc\u00e7\u00fck notlar yolla. Konu ve i\u00e7erik do\u011fal, link az, ek yok. \u201cMerhaba, bu bir testtir; cevap verirsen sevinirim\u201d kadar samimi ve k\u0131sa. D\u00f6n\u00fc\u015f al\u0131yorsan yol a\u00e7\u0131k.<\/p>\n<h3><span id=\"24_gun_Tanidik_halka_az_ama_duzenli\">2\u20134. g\u00fcn: Tan\u0131d\u0131k halka, az ama d\u00fczenli<\/span><\/h3>\n<p>Ger\u00e7ekten bekleyen k\u00fc\u00e7\u00fck bir kitleye g\u00fcnl\u00fck ayn\u0131 saatlerde g\u00f6nder. Hacmi b\u00fcy\u00fctme, ritmi koru. Spam \u015fikayetleri yoksa, a\u00e7\u0131lma iyi gidiyorsa ufak ufak art\u0131r. Tutan d\u00fczeni bozma; itibar panellerini kontrol et.<\/p>\n<h3><span id=\"57_gun_Icerigi_cesitlendirmek\">5\u20137. g\u00fcn: \u0130\u00e7eri\u011fi \u00e7e\u015fitlendirmek<\/span><\/h3>\n<p>Basit bir duyuru, bir rehber linki, minik bir g\u00f6rsel\u2026 Ama her \u015fey \u00f6l\u00e7\u00fcl\u00fc. Bu s\u0131rada bounce\u2019lar\u0131 not et, ge\u00e7ici ve kal\u0131c\u0131 ayr\u0131m\u0131na g\u00f6re listeni temizle. Bir bakm\u0131\u015fs\u0131n, ikinci haftaya eli y\u00fcz\u00fc d\u00fczg\u00fcn bir itibarla giriyorsun.<\/p>\n<h2 id=\"section-14\"><span id=\"Sorun_Giderme_Birkac_Komut_Birkac_Puf\">Sorun Giderme: Birka\u00e7 Komut, Birka\u00e7 P\u00fcf<\/span><\/h2>\n<h3><span id=\"Cikis_testi_ve_icerik_basligi\">\u00c7\u0131k\u0131\u015f testi ve i\u00e7erik ba\u015fl\u0131\u011f\u0131<\/span><\/h3>\n<p>Komut sat\u0131r\u0131nda <em>swaks<\/em> kullanmak pratik:<\/p>\n<pre class=\"language-bash line-numbers\"><code class=\"language-bash\">sudo apt install swaks\nswaks --to kendin@example.com --from ben@example.com --server mail.example.com:587 \n  --auth-user ben@example.com --auth-password 'parola' --tls\n<\/code><\/pre>\n<p>Ba\u015fl\u0131klar\u0131n d\u00fczg\u00fcn, DKIM imzas\u0131n\u0131n eklendi\u011fini, SPF\u2019in \u201cpass\u201d verdi\u011fini g\u00f6r. Bu \u00fc\u00e7l\u00fc d\u00fczg\u00fcnse kalan \u00e7o\u011fu mesele i\u00e7erik ve itibar taraf\u0131nda d\u00fczelir. Bir de g\u00f6nderen alan ad\u0131n\u0131n s\u00fcresi yakla\u015fm\u0131\u015f m\u0131, g\u00f6zden ka\u00e7mas\u0131n; bu konuyu merak edersen <a href=\"https:\/\/www.dchost.com\/blog\/alan-adi-suresi-dolarsa-ne-olur-panik-yok-grace-redemption-donemlerinde-yol-haritasi\/\">alan ad\u0131n\u0131n s\u00fcresi dolarsa ne olur, ad\u0131m ad\u0131m yol haritas\u0131<\/a> yaz\u0131s\u0131 huzur verir.<\/p>\n<h2 id=\"section-15\"><span id=\"Kapanis_Evdeki_Firini_Isitmak\">Kapan\u0131\u015f: Evdeki F\u0131r\u0131n\u0131 Is\u0131tmak<\/span><\/h2>\n<p>VPS \u00fczerinde Postfix + Dovecot + rspamd kurup ilk postay\u0131 u\u00e7urmak, san\u0131ld\u0131\u011f\u0131 kadar \u00fcrk\u00fct\u00fcc\u00fc de\u011fil. Birka\u00e7 temel ta\u015f yerine oturunca, i\u015fin b\u00fcy\u00fcs\u00fc teslim edilebilirlik ve itibar y\u00f6netiminde yat\u0131yor. Acele etmeden, her g\u00fcn k\u00fc\u00e7\u00fck ama d\u00fczenli ad\u0131mlarla ilerledi\u011finde IP \u0131s\u0131n\u0131r, al\u0131c\u0131lar seni tan\u0131r ve posta kutular\u0131 kap\u0131lar\u0131n\u0131 a\u00e7ar. \u0130lk g\u00fcnlerde testleri ihmal etme; loglara kulak ver, DMARC raporlar\u0131n\u0131 cebe at, i\u00e7erikte sade ol. G\u00fcn\u00fcn sonunda arad\u0131\u011f\u0131n duygu \u015fu: \u201cKontrol bende.\u201d<\/p>\n<p>Bu rehberi kapat\u0131rken sana minik bir hat\u0131rlatma b\u0131rakay\u0131m. Otomasyonu ufaktan dene; Terraform ve Ansible yakla\u015f\u0131mlar\u0131 ileride \u00e7ok zaman kazand\u0131r\u0131r. G\u00fcvenlikte kap\u0131lar\u0131 aral\u0131k de\u011fil, ayar\u0131nda tut; UFW ve Fail2ban gibi k\u00fc\u00e7\u00fck yard\u0131mc\u0131lar huzur verir. Ve en \u00f6nemlisi, g\u00f6nderdi\u011fin e\u2011postan\u0131n di\u011fer ucunda ger\u00e7ekten bir insan var; ilgili, net ve sayg\u0131l\u0131 olursan, teknik taraf zaten yolunu a\u00e7\u0131yor. Umar\u0131m bu yaz\u0131 i\u015fine yarar; bir sonraki yaz\u0131da daha da derine dalar\u0131z, g\u00f6r\u00fc\u015fmek \u00fczere.<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>\u0130&ccedil;indekiler1 E\u2011postay\u0131 Kendi Evinde A\u011f\u0131rlamak: Neden, Ne Zaman, Nas\u0131l?2 Yol Haritas\u0131n\u0131 \u00c7izelim: Temeller, DNS ve Ufak Haz\u0131rl\u0131klar2.1 \u00d6nce alan ad\u0131 ve isimlendirme2.2 VPS haz\u0131rl\u0131\u011f\u0131: Saat do\u011fru, kap\u0131lar kontroll\u00fc3 Postfix ile G\u00f6nderim: Sakin, Temiz ve Anla\u015f\u0131l\u0131r Bir Kurgu3.1 Kurulum ve temel ayarlar4 Dovecot ile IMAP ve Kimlik Do\u011frulama: Postalar\u0131 Rahat\u00e7a Okumak4.1 Kurulum ve temel yap\u0131land\u0131rma5 rspamd [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1711,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-1710","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-teknoloji"],"_links":{"self":[{"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/posts\/1710","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/comments?post=1710"}],"version-history":[{"count":0,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/posts\/1710\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/media\/1711"}],"wp:attachment":[{"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/media?parent=1710"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/categories?post=1710"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dchost.com\/blog\/wp-json\/wp\/v2\/tags?post=1710"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}