{"id":373,"date":"2026-09-19T11:37:13","date_gmt":"2026-09-19T11:37:13","guid":{"rendered":"https:\/\/rbl.watch\/blog\/postfix-spam-tespiti\/"},"modified":"2026-09-19T11:37:13","modified_gmt":"2026-09-19T11:37:13","slug":"postfix-spam-tespiti","status":"publish","type":"post","link":"https:\/\/rbl.watch\/blog\/postfix-spam-tespiti\/","title":{"rendered":"Postfix&#8217;te Spam Kayna\u011f\u0131n\u0131 Bulma"},"content":{"rendered":"\n<div style=\"border-left:4px solid #f59e0b;background:#fffbeb;padding:14px 18px;border-radius:8px;margin:0 0 8px;\">\n<strong>\u26a0\ufe0f \u00d6nce \u015funu bilin:<\/strong> Kara listeden <strong>\u00e7\u0131karma talebi son ad\u0131md\u0131r.<\/strong> Kayna\u011f\u0131 kapatmadan \u00e7\u0131karma istemek IP&#8217;nizi hemen yeniden listeler ve self-service \u00e7\u0131karma hakk\u0131n\u0131z\u0131 yakar. Bkz. <a href=\"\/blog\/delist-oncesi-kontrol-listesi\/\">\u00e7\u0131karma \u00f6ncesi kontrol listesi<\/a>.\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Panelsiz Linux mail sunucular\u0131 i\u00e7in temel makale budur. Ayn\u0131 zamanda setin ortak paydas\u0131d\u0131r: Zimbra, cPanel\/DirectAdmin ve Plesk de altta Postfix ya da Exim \u00e7al\u0131\u015ft\u0131r\u0131r, bu y\u00fczden buradaki mant\u0131k her yerde kar\u015f\u0131l\u0131k bulur. Platform emin de\u011filseniz \u00f6nce <a href=\"\/blog\/sunucudan-spam-tespiti\/\">te\u015fhis ak\u0131\u015f\u0131na<\/a> bak\u0131n.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Kuyru\u011fu Okuma<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code># Kuyrukta ka\u00e7 mesaj var\npostqueue -p | tail -1\n\n# Kuyru\u011fun \u015fekli: hangi alan ad\u0131na, ne kadar deferred birikmi\u015f\nqshape deferred | head<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Belirli bir alan ad\u0131na do\u011fru b\u00fcy\u00fck bir <code>deferred<\/code> y\u0131\u011f\u0131lmas\u0131, o alana toplu spam g\u00f6nderildi\u011finin i\u015faretidir.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">G\u00fcnl\u00fck G\u00f6nderen Da\u011f\u0131l\u0131m\u0131 (pflogsumm)<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code># G\u00fcnl\u00fck \u00f6zet: en \u00e7ok g\u00f6nderen adresler, al\u0131c\u0131lar, reddedilenler\npflogsumm -d today \/var\/log\/mail.log | less<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">En Kritik Ayr\u0131m: Ele Ge\u00e7irilmi\u015f Hesap m\u0131, \u0130stismar Edilen Script mi?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Bu ayr\u0131m\u0131 log sat\u0131r\u0131ndaki <code>sasl_username<\/code> varl\u0131\u011f\u0131ndan okursunuz \u2014 ve bu ayr\u0131m yap\u0131lmadan yanl\u0131\u015f yerde saatler harcan\u0131r:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>sasl_username VAR:<\/strong> Kimlik do\u011frulamal\u0131 g\u00f6nderim \u2192 <strong>ele ge\u00e7irilmi\u015f hesap.<\/strong> Hesab\u0131 bulup kilitleyin.<\/li>\n<li><strong>sasl_username YOK:<\/strong> Kimlik do\u011frulamas\u0131z yerel g\u00f6nderim \u2192 <strong>istismar edilen script<\/strong> (genelde PHP). Web dizininde aray\u0131n.<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code># \u00d6ne \u00e7\u0131kan kimlik do\u011frulamal\u0131 g\u00f6nderen (hesap ele ge\u00e7irilmi\u015fse burada belirir)\nzgrep -h 'sasl_username=' \/var\/log\/mail.log* \/var\/log\/maillog* 2>\/dev\/null \\\n  | sed -n 's\/.*sasl_username=\/\/p' | cut -d, -f1 \\\n  | sort | uniq -c | sort -nr | head<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Ayn\u0131 hesab\u0131n farkl\u0131 \u00fclkelerden ba\u011flanmas\u0131 (co\u011frafi anomali) ele ge\u00e7irilmenin kesin i\u015faretidir. E\u011fer log&#8217;da anlaml\u0131 bir <code>sasl_username<\/code> yo\u011funlu\u011fu yoksa, kaynak script kaynakl\u0131d\u0131r \u2014 <a href=\"\/blog\/php-mail-spam-tespiti\/\">PHP mail() spam<\/a> makalesindeki y\u00f6ntemlerle web dizinini taray\u0131n.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">mynetworks Denetimi ve A\u00e7\u0131k Relay Testi<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code># Relay aral\u0131\u011f\u0131 fazla geni\u015f mi\npostconf -n mynetworks smtpd_relay_restrictions<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><code>mynetworks<\/code> yaln\u0131zca g\u00fcvenilir yerel aral\u0131klar\u0131 i\u00e7ermeli; <code>0.0.0.0\/0<\/code> gibi bir de\u011fer a\u00e7\u0131k relay demektir. <code>smtpd_relay_restrictions<\/code> i\u00e7inde <code>permit_mynetworks, reject_unauth_destination<\/code> bulunmal\u0131d\u0131r.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Kal\u0131c\u0131 Koruma<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>anvil<\/strong> limitleri: ba\u011flant\u0131\/oturum ba\u015f\u0131na e\u015fzamanl\u0131l\u0131k ve h\u0131z s\u0131n\u0131rlar\u0131.<\/li>\n<li><strong>postfwd<\/strong>: g\u00f6nderen\/hesap ba\u015f\u0131na h\u0131z s\u0131n\u0131rlama (rate limiting) politikalar\u0131.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Kendi Linux mail sunucunuzu izole ve kontroll\u00fc tutmak i\u00e7in <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/sanal-sunucu.html\" target=\"_blank\" rel=\"noopener\">sanal sunucu (VPS)<\/a> \u00e7\u00f6z\u00fcmleri idealdir. Kal\u0131c\u0131 \u00f6nlemlerin tamam\u0131 i\u00e7in <a href=\"\/blog\/spam-tekrarini-onleme\/\">bir daha listelenmemek i\u00e7in kal\u0131c\u0131 \u00f6nlemler<\/a> makalesine bak\u0131n.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Kaynak Kapand\u0131 m\u0131? Son Kontrol<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u2610 Ele ge\u00e7irilmi\u015f hesap kilitli \/ zararl\u0131 script silindi (hangisiyse)<\/li>\n<li>\u2610 Kuyruk (<code>postqueue -p<\/code>) temizlendi<\/li>\n<li>\u2610 <code>mynetworks<\/code> daralt\u0131ld\u0131, relay k\u0131s\u0131tlamalar\u0131 do\u011fru<\/li>\n<li>\u2610 anvil\/postfwd ile h\u0131z s\u0131n\u0131r\u0131 devrede<\/li>\n<li>\u2610 IP yeni tespit alm\u0131yor \u2014 <a href=\"\/blacklist-check\">kontrol edin<\/a>, sonra <a href=\"\/blog\/delist-oncesi-kontrol-listesi\/\">\u00e7\u0131karmay\u0131 de\u011ferlendirin<\/a><\/li>\n<\/ul>\n\n","protected":false},"excerpt":{"rendered":"<p>\u26a0\ufe0f \u00d6nce \u015funu bilin: Kara listeden \u00e7\u0131karma talebi son ad\u0131md\u0131r. Kayna\u011f\u0131 kapatmadan \u00e7\u0131karma istemek IP&#8217;nizi hemen yeniden listeler ve self-service \u00e7\u0131karma hakk\u0131n\u0131z\u0131 yakar. Bkz. \u00e7\u0131karma \u00f6ncesi kontrol listesi. Panelsiz Linux mail sunucular\u0131 i\u00e7in temel makale budur. Ayn\u0131 zamanda setin ortak paydas\u0131d\u0131r: Zimbra, cPanel\/DirectAdmin ve Plesk de altta Postfix ya da Exim \u00e7al\u0131\u015ft\u0131r\u0131r, bu y\u00fczden buradaki &#8230; <a title=\"Postfix&#8217;te Spam Kayna\u011f\u0131n\u0131 Bulma\" class=\"read-more\" href=\"https:\/\/rbl.watch\/blog\/postfix-spam-tespiti\/\" aria-label=\"Read more about Postfix&#8217;te Spam Kayna\u011f\u0131n\u0131 Bulma\">Devam\u0131n\u0131 oku<\/a><\/p>\n","protected":false},"author":2,"featured_media":374,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-373","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-nasil-yapilir"],"_links":{"self":[{"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/posts\/373","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/comments?post=373"}],"version-history":[{"count":0,"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/posts\/373\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/media\/374"}],"wp:attachment":[{"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/media?parent=373"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/categories?post=373"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rbl.watch\/blog\/wp-json\/wp\/v2\/tags?post=373"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}