{"id":1194,"date":"2017-05-25T16:56:15","date_gmt":"2017-05-25T14:56:15","guid":{"rendered":"http:\/\/www.ayhanarda.com\/blog\/?p=1194"},"modified":"2017-05-25T16:56:15","modified_gmt":"2017-05-25T14:56:15","slug":"vesta-panel-kurulu-sunucunun-dns-cozumleyememesi-sorunu-ve-cozumu","status":"publish","type":"post","link":"https:\/\/www.ayhanarda.com\/blog\/2017\/05\/vesta-panel-kurulu-sunucunun-dns-cozumleyememesi-sorunu-ve-cozumu\/","title":{"rendered":"Vesta panel kurulu sunucunun dns \u00e7\u00f6z\u00fcmleyememesi sorunu ve \u00e7\u00f6z\u00fcm\u00fc"},"content":{"rendered":"

Sunucunuz herhangi bir ip yi pingleyebiliyor ama isim \u00e7\u00f6zemiyor durumda ise , \/etc\/resolv.conf dosyan\u0131zda ki dns serverlar eri\u015filebilir durumda ise , iptables kullan\u0131yor iseniz muhtemelen resolv.conf dosyan\u0131zda yazan ip lere do\u011fru 53 portunun gidi\u015fine izin vermeniz gerekecektir.<\/p>\n

Vesta iptables kural dizisini a\u015fa\u011f\u0131daki \u015fekilde g\u00f6rebilirsiniz.<\/p>\n

nano $<\/span>VESTA<\/span>\/<\/span>data<\/span>\/<\/span>firewall<\/span>\/<\/span>rules<\/span>.<\/span>conf<\/span><\/p>\n

Kural de\u011fi\u015ftirdikten sonra update etmek i\u00e7in a\u015fa\u011f\u0131daki komutu kullanabilirsiniz.<\/p>\n

v<\/span>–<\/span>update<\/span>–<\/span>firewall<\/span><\/p>\n

\u00d6rne\u011fin resolv.conf dosyan\u0131zda google \u0131n 8.8.8.8 ve 8.8.4.4 dns leri var , bu durumda a\u015fa\u011f\u0131daki komutlar \u00e7al\u0131\u015ft\u0131rabilirsiniz.<\/p>\n

\/sbin\/iptables –<\/span>A<\/span> OUTPUT<\/span> –<\/span>p<\/span> udp<\/span> –<\/span>d<\/span> 8.8.8.8<\/span> —<\/span>dport<\/span> 53<\/span> –<\/span>m<\/span> state<\/span> —<\/span>state <\/span>NEW<\/span>,<\/span>ESTABLISHED<\/span> –<\/span>j<\/span> ACCEPT<\/span><\/strong><\/p>\n

\/sbin\/iptables –<\/span>A<\/span> INPUT<\/span>\u00a0\u00a0<\/span>–<\/span>p<\/span> udp<\/span> –<\/span>s<\/span> 8.8.8.8<\/span> —<\/span>sport<\/span> 53<\/span> –<\/span>m<\/span> state<\/span> —<\/span>state <\/span>ESTABLISHED<\/span>\u00a0\u00a0\u00a0\u00a0 <\/span>–<\/span>j<\/span> ACCEPT<\/span><\/strong><\/p>\n

\/sbin\/iptables –<\/span>A<\/span> OUTPUT<\/span> –<\/span>p<\/span> tcp<\/span> –<\/span>d<\/span> 8.8.4.4<\/span> —<\/span>dport<\/span> 53<\/span> –<\/span>m<\/span> state<\/span> —<\/span>state <\/span>NEW<\/span>,<\/span>ESTABLISHED<\/span> –<\/span>j<\/span> ACCEPT<\/span><\/strong><\/p>\n

\/sbin\/iptables –<\/span>A<\/span> INPUT<\/span>\u00a0\u00a0<\/span>–<\/span>p<\/span> tcp<\/span> –<\/span>s<\/span> 8.8.4.4<\/span><\/span> —<\/span>sport<\/span> 53<\/span> –<\/span>m<\/span> state<\/span> —<\/span>state <\/span>ESTABLISHED<\/span>\u00a0\u00a0\u00a0\u00a0 <\/span>–<\/span>j<\/span> ACCEPT<\/span><\/strong><\/p>\n

Bunu her seferinde tek tek yapmamak i\u00e7in k\u00fc\u00e7\u00fck bir bash script kullanabilirsiniz. \u00d6rne\u011fi a\u015fa\u011f\u0131daki gibidir.<\/p>\n

<\/a>Source code<\/a><\/td><\/a> <\/a> <\/a> <\/td><\/tr><\/table><\/div>
#!\/bin\/bash<\/span>\nFirewall<\/span>="\/sbin\/iptables"<\/span>\n \n# Ayhan ARDA - http:\/\/www.ayhanarda.com<\/span>\nDNS_SUNUCU<\/span>=$(<\/span>cat<\/span> \/<\/span>etc\/<\/span>resolv.conf  |<\/span> grep<\/span> -v<\/span> '^#'<\/span> |<\/span> grep<\/span> nameserver |<\/span> awk<\/span> '{print $2}'<\/span>)<\/span>\n \nfor<\/span> ip in<\/span> $DNS_SUNUCU<\/span>\ndo<\/span>\n        echo<\/span> "(tcp, udp port 53) '$ip<\/span>' adresleri i\u00e7in izinler veriliyor"<\/span>\n        $Firewall<\/span> -A<\/span> OUTPUT -p<\/span> udp -d<\/span> $ip<\/span> --dport<\/span> 53 -m<\/span> state --state<\/span> NEW,ESTABLISHED -j<\/span> ACCEPT\n        $Firewall<\/span> -A<\/span> INPUT  -p<\/span> udp -s<\/span> $ip<\/span> --sport<\/span> 53 -m<\/span> state --state<\/span> ESTABLISHED     -j<\/span> ACCEPT\n        $Firewall<\/span> -A<\/span> OUTPUT -p<\/span> tcp -d<\/span> $ip<\/span> --dport<\/span> 53 -m<\/span> state --state<\/span> NEW,ESTABLISHED -j<\/span> ACCEPT\n        $Firewall<\/span> -A<\/span> INPUT  -p<\/span> tcp -s<\/span> $ip<\/span> --sport<\/span> 53 -m<\/span> state --state<\/span> ESTABLISHED     -j<\/span> ACCEPT\ndone<\/span><\/pre><\/div><\/div>\n
Ayhan ARDA<\/p>\n
\"Share<\/a>