{"id":367,"date":"2026-09-19T11:36:42","date_gmt":"2026-09-19T11:36:42","guid":{"rendered":"https:\/\/rbl.watch\/blog\/sunucudan-spam-tespiti\/"},"modified":"2026-09-19T11:36:42","modified_gmt":"2026-09-19T11:36:42","slug":"sunucudan-spam-tespiti","status":"publish","type":"post","link":"https:\/\/rbl.watch\/blog\/sunucudan-spam-tespiti\/","title":{"rendered":"Sunucunuzdan Spam \u00c7\u0131k\u0131yor mu? Alt\u0131 Ad\u0131mda Tespit"},"content":{"rendered":"\n<div style=\"border-left:4px solid #f59e0b;background:#fffbeb;padding:14px 18px;border-radius:8px;margin:0 0 8px;\">\n<strong>\u26a0\ufe0f \u00d6nce \u015funu bilin:<\/strong> Kara listeden <strong>\u00e7\u0131karma talebi ilk de\u011fil son ad\u0131md\u0131r.<\/strong> Kayna\u011f\u0131 kapatmadan \u00e7\u0131karma istemek IP&#8217;nizi hemen yeniden listeler ve self-service \u00e7\u0131karma hakk\u0131n\u0131z\u0131 yakar. \u00d6nce kayna\u011f\u0131 bulun; \u00e7o\u011fu liste kaynak kapan\u0131nca kendili\u011finden d\u00fc\u015fer. Bkz. <a href=\"\/blog\/delist-oncesi-kontrol-listesi\/\">\u00e7\u0131karma istemeden \u00f6nce<\/a>.\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">IP adresiniz kara listeye d\u00fc\u015ft\u00fcyse ya da sunucunuzdan spam \u00e7\u0131kt\u0131\u011f\u0131ndan \u015f\u00fcpheleniyorsan\u0131z, tek ger\u00e7ek \u00e7\u00f6z\u00fcm kayna\u011f\u0131 bulup kapatmakt\u0131r. Bu makale <strong>platformdan ba\u011f\u0131ms\u0131z<\/strong> bir te\u015fhis ak\u0131\u015f\u0131d\u0131r: hangi panelde oldu\u011funuzu bilmeseniz bile, \u00f6nce hangi mail sunucusunda oldu\u011funuzu belirleyip sonra ortak ad\u0131mlar\u0131 uygulaman\u0131z\u0131 sa\u011flar. Platformunuzu tespit ettikten sonra kendi platform makalenize dallanabilirsiniz.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">1. Belirtiler: Sunucunuzdan Spam \u00c7\u0131k\u0131yor mu?<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Kuyruk \u015fi\u015fmesi:<\/strong> Mail kuyru\u011funda aniden binlerce mesaj birikmesi.<\/li>\n<li><strong>RBL kayd\u0131:<\/strong> IP&#8217;nizin bir kara listede belirmesi \u2014 <a href=\"\/blacklist-check\">kara liste sorgulama<\/a> ile do\u011frulay\u0131n.<\/li>\n<li><strong>Giden 25\/tcp art\u0131\u015f\u0131:<\/strong> D\u0131\u015far\u0131 a\u00e7\u0131lan SMTP ba\u011flant\u0131lar\u0131nda ani y\u00fckseli\u015f.<\/li>\n<li><strong>Al\u0131c\u0131lardan 5xx reddi:<\/strong> Kar\u015f\u0131 sunucular\u0131n mailinizi reddetmesi.<\/li>\n<li><strong>M\u00fc\u015fteri \u015fik\u00e2yeti:<\/strong> &#8220;Maillerim gitmiyor \/ spam&#8217;e d\u00fc\u015f\u00fcyor&#8221; bildirimleri.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">2. Hangi Platformdas\u0131n\u0131z? A\u00e7\u0131k Porttan Te\u015fhis<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Hangi y\u00f6netim panelinde oldu\u011funuzu bilmiyorsan\u0131z, dinlenen portlar h\u0131zl\u0131 bir ipucu verir:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>A\u00e7\u0131k port<\/th><th>Platform<\/th><th>Makale<\/th><\/tr><\/thead><tbody>\n<tr><td>7071<\/td><td>Zimbra<\/td><td><a href=\"\/blog\/zimbra-spam-tespiti\/\">Zimbra<\/a><\/td><\/tr>\n<tr><td>2083 \/ 2087<\/td><td>cPanel \/ WHM<\/td><td><a href=\"\/blog\/cpanel-exim-spam-tespiti\/\">cPanel &amp; Exim<\/a><\/td><\/tr>\n<tr><td>8443 \/ 8880<\/td><td>Plesk<\/td><td><a href=\"\/blog\/plesk-spam-tespiti\/\">Plesk<\/a><\/td><\/tr>\n<tr><td>2222<\/td><td>DirectAdmin<\/td><td>Exim tabanl\u0131 \u2014 <a href=\"\/blog\/cpanel-exim-spam-tespiti\/\">Exim rehberi<\/a><\/td><\/tr>\n<tr><td>3389<\/td><td>Windows (RDP)<\/td><td><a href=\"\/blog\/mailenable-spam-tespiti\/\">MailEnable<\/a><\/td><\/tr>\n<tr><td>\u2014<\/td><td>Panelsiz Linux<\/td><td><a href=\"\/blog\/postfix-spam-tespiti\/\">Postfix<\/a><\/td><\/tr>\n<\/tbody><\/table><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code># Sunucuda hangi y\u00f6netim portlar\u0131 a\u00e7\u0131k \u2014 platformu ele verir\nss -tlnp | grep -E ':(7071|2083|2087|8443|8880|2222|3389)\\b'<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">3. Kuyru\u011fa Bak\u0131n \u2014 En H\u0131zl\u0131 Sinyal<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Spam \u00e7\u0131k\u0131\u015f\u0131n\u0131n ilk ve en h\u0131zl\u0131 g\u00f6stergesi mail kuyru\u011fudur. Platform ne olursa olsun, altta Postfix veya Exim \u00e7al\u0131\u015f\u0131r:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># Giden 25\/tcp ba\u011flant\u0131 say\u0131s\u0131 \u2014 anl\u0131k en h\u0131zl\u0131 g\u00f6sterge\nss -tn state established '( dport = :25 )' | wc -l\n\n# Kuyrukta ne var (Postfix \/ Exim)\npostqueue -p | tail -1\nexim -bpc<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Kuyrukta binlerce mesaj ve giden ba\u011flant\u0131larda anormal bir say\u0131 varsa, sunucunuz aktif olarak spam g\u00f6nderiyor demektir.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">4. Kimlik Do\u011frulamal\u0131 G\u00f6nderimde Anomali<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Bir e-posta hesab\u0131n\u0131n di\u011ferlerinden <strong>kat kat fazla<\/strong> oturum a\u00e7mas\u0131, ele ge\u00e7irilmi\u015f hesab\u0131n klasik imzas\u0131d\u0131r. Log&#8217;daki <code>sasl_username<\/code> alan\u0131n\u0131 sayarak \u00f6ne \u00e7\u0131kan hesab\u0131 bulun (komutlar platform makalelerinde). Ayn\u0131 hesab\u0131n farkl\u0131 \u00fclkelerden giri\u015f yapmas\u0131 ise kesin bir i\u015farettir.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">5. Script Kaynakl\u0131 G\u00f6nderim<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Log&#8217;da <strong>kimlik do\u011frulamas\u0131 olmadan<\/strong> \u00e7\u0131kan mail g\u00f6r\u00fcyorsan\u0131z (yani <code>sasl_username<\/code> yok), kaynak b\u00fcy\u00fck olas\u0131l\u0131kla bir web dizininden tetiklenen istismar edilmi\u015f bir script&#8217;tir. Bu ayr\u0131m kritiktir: hesap m\u0131, script mi? \u0130kisi farkl\u0131 yerlerde aran\u0131r. Detay i\u00e7in <a href=\"\/blog\/php-mail-spam-tespiti\/\">PHP mail() ile g\u00f6nderilen spam<\/a> makalesine bak\u0131n.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">6. Relay Yap\u0131land\u0131rmas\u0131<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Son olarak, sunucunuz a\u00e7\u0131k relay olabilir: <code>mynetworks<\/code> (veya e\u015fde\u011feri) fazla geni\u015f tan\u0131mlanm\u0131\u015fsa, kimli\u011fi do\u011frulanmam\u0131\u015f \u00fc\u00e7\u00fcnc\u00fc taraflar sunucunuz \u00fczerinden mail g\u00f6nderebilir. Relay k\u0131s\u0131tlamalar\u0131n\u0131z\u0131 denetleyin (platform makalelerinde komutlar).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kendi y\u00f6netiminizde bir sunucu kullan\u0131yorsan\u0131z, izole ve temiz bir g\u00f6nderim ortam\u0131 i\u00e7in <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vps-server.html\" target=\"_blank\" rel=\"noopener\">dedicated IP&#8217;li VPS<\/a> \u00e7\u00f6z\u00fcmleri kontrol\u00fc kolayla\u015ft\u0131r\u0131r.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sonraki Ad\u0131m: Platformunuza Dallan\u0131n<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"\/blog\/zimbra-spam-tespiti\/\">Zimbra&#8217;da spam kayna\u011f\u0131n\u0131 bulma<\/a><\/li>\n<li><a href=\"\/blog\/cpanel-exim-spam-tespiti\/\">cPanel ve Exim&#8217;de spam script&#8217;ini bulma<\/a><\/li>\n<li><a href=\"\/blog\/plesk-spam-tespiti\/\">Plesk&#8217;te spam kayna\u011f\u0131n\u0131 bulma<\/a><\/li>\n<li><a href=\"\/blog\/postfix-spam-tespiti\/\">Postfix&#8217;te spam kayna\u011f\u0131n\u0131 bulma<\/a><\/li>\n<li><a href=\"\/blog\/mailenable-spam-tespiti\/\">MailEnable&#8217;da (Windows) spam kayna\u011f\u0131n\u0131 bulma<\/a><\/li>\n<li><a href=\"\/blog\/php-mail-spam-tespiti\/\">PHP mail() ile g\u00f6nderilen spam<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Kayna\u011f\u0131 Bulduktan Sonra<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u2610 Kayna\u011f\u0131 kapat\u0131n (hesap kilidi \/ script silme)<\/li>\n<li>\u2610 Kuyru\u011fu temizleyin<\/li>\n<li>\u2610 G\u00f6nderim limiti koyun \u2014 <a href=\"\/blog\/spam-tekrarini-onleme\/\">kal\u0131c\u0131 \u00f6nlemler<\/a><\/li>\n<li>\u2610 <strong>Sonra<\/strong> \u00e7\u0131karma s\u00fcrecini de\u011ferlendirin \u2014 <a href=\"\/blog\/delist-oncesi-kontrol-listesi\/\">\u00e7\u0131karma \u00f6ncesi kontrol listesi<\/a><\/li>\n<\/ul>\n\n","protected":false},"excerpt":{"rendered":"<p>\u26a0\ufe0f \u00d6nce \u015funu bilin: Kara listeden \u00e7\u0131karma talebi ilk de\u011fil son ad\u0131md\u0131r. Kayna\u011f\u0131 kapatmadan \u00e7\u0131karma istemek IP&#8217;nizi hemen yeniden listeler ve self-service \u00e7\u0131karma hakk\u0131n\u0131z\u0131 yakar. \u00d6nce kayna\u011f\u0131 bulun; \u00e7o\u011fu liste kaynak kapan\u0131nca kendili\u011finden d\u00fc\u015fer. Bkz. \u00e7\u0131karma istemeden \u00f6nce. IP adresiniz kara listeye d\u00fc\u015ft\u00fcyse ya da sunucunuzdan spam \u00e7\u0131kt\u0131\u011f\u0131ndan \u015f\u00fcpheleniyorsan\u0131z, tek ger\u00e7ek \u00e7\u00f6z\u00fcm kayna\u011f\u0131 bulup kapatmakt\u0131r. &#8230; <a title=\"Sunucunuzdan Spam \u00c7\u0131k\u0131yor mu? Alt\u0131 Ad\u0131mda Tespit\" class=\"read-more\" href=\"https:\/\/rbl.watch\/blog\/sunucudan-spam-tespiti\/\" aria-label=\"Read more about Sunucunuzdan Spam \u00c7\u0131k\u0131yor mu? Alt\u0131 Ad\u0131mda Tespit\">Devam\u0131n\u0131 oku<\/a><\/p>\n","protected":false},"author":2,"featured_media":368,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-367","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-nasil-yapilir"],"_links":{"self":[{"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/posts\/367","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/comments?post=367"}],"version-history":[{"count":0,"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/posts\/367\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/media\/368"}],"wp:attachment":[{"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/media?parent=367"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/categories?post=367"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/tags?post=367"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}