{"id":517,"date":"2014-01-09T23:12:50","date_gmt":"2014-01-09T21:12:50","guid":{"rendered":"http:\/\/network23.org\/kame\/?p=517"},"modified":"2017-01-08T15:04:44","modified_gmt":"2017-01-08T13:04:44","slug":"dnscrypt","status":"publish","type":"post","link":"https:\/\/network23.org\/kame\/2014\/01\/09\/dnscrypt\/","title":{"rendered":"DNSCrypt"},"content":{"rendered":"

Veri trafi\u011fini daha iyi \u015fifrelemenin en iyi yollar\u0131ndan biri de DNSCrypt kullanmakt\u0131r. Sizleri k\u00fcresel dinleme ve yapaca\u011f\u0131n\u0131z hatalardan korumayacak ama DNS trafi\u011finiz \u015fifreli bir hale d\u00f6n\u00fc\u015fecektir.<\/p><\/blockquote>\n

DNSCrypt<\/a> k\u0131saca, bir istemci ile DNS \u00e7\u00f6z\u00fcc\u00fc aras\u0131ndaki ileti\u015fimi \u015fifreleyen bir ara\u00e7t\u0131r<\/strong>. Di\u011fer bir deyi\u015fle, DNSCrypt proxysi do\u011frudan yerel \u00e7\u00f6z\u00fcc\u00fc olarak kullanabilece\u011finiz ya da DNSCrypt protokol\u00fc olarak DNS isteklerini g\u00f6nderen, \u015fifreleyen ve do\u011frulayan yerel bir servis sa\u011flamaktad\u0131r<\/strong>. Bununla birlikte, DNSCrypt y\u00fcksek h\u0131zl\u0131 ve y\u00fcksek g\u00fcvenlikli elliptic-curve kriptosu<\/a> kullanmakta ve istemci ile birinci-seviye \u00e7\u00f6z\u00fcc\u00fc aras\u0131ndaki ileti\u015fimi korumaya odaklanmaktad\u0131r.<\/p>\n

DNSCrypt’i bu kadar farkl\u0131 k\u0131lan \u015feylere bakarsak e\u011fer, SSL<\/a> nas\u0131l HTTP web trafi\u011fini HTTPS \u015fifreli web trafi\u011fine \u00e7eviriyorsa DNSCrypt de s\u0131radan bir DNS trafi\u011fini \u015fifreli DNS trafi\u011fine d\u00f6n\u00fc\u015ft\u00fcrmektedir. Bu da kullan\u0131c\u0131ya dinleme ya da man-in-the-middle sald\u0131r\u0131lar\u0131 gibi durumlarda koruma sa\u011flamaktad\u0131r. Ayr\u0131ca, DNSCrypt platform ba\u011f\u0131ms\u0131z bir uygulamad\u0131r<\/strong> ve GNU\/Linux, Windows ya da iOS (jailbreak \u015fart\u0131 var<\/em>) sistemlerde rahatl\u0131kla kullabilirsiniz. \u00d6rne\u011fimiz GNU\/Linux \u00fczerinde olacak fakat sizler farkl\u0131 platformlar i\u00e7in en altta verilmi\u015f ba\u011flant\u0131lar \u00fczerinden hareketle gidebilirsiniz.\u00a0 Bununla birlikte, da\u011f\u0131t\u0131m\u0131n\u0131z\u0131n ne oldu\u011funu bilmiyorum. E\u011fer, kulland\u0131\u011f\u0131n\u0131z da\u011f\u0131t\u0131m\u0131n depolar\u0131nda dnscrypt paketi yok ise direkt 2. y\u00f6nteme bakabilirsiniz.<\/p>\n

1. Depodan kurulum<\/strong><\/p>\n

\u0130\u015flemlerimizi terminal \u00fczerinden root olarak ger\u00e7ekle\u015ftirece\u011fiz. Hemen bir tane a\u00e7\u0131n ve:<\/p>\n

kame ~ $<\/strong> apt-get install dnscrypt-proxy (pacman -S dnscrypt-proxy veya da\u011f\u0131t\u0131m\u0131n\u0131z neyse onun paket y\u00f6neticisi ile kurulumu ger\u00e7ekle\u015ftirin.)<\/code><\/p>\n

Kurulum tamamland\u0131ktan sonra dnscrypt-proxy servisini ba\u015flat\u0131n. Debian<\/a> ve t\u00fcrevi da\u011f\u0131t\u0131mlarda bu otomatik olarak ger\u00e7ekle\u015fecektir. E\u011fer ba\u015flamazsa:
\n
\nkame ~ $<\/strong> \/etc\/init.d\/dnscrypt-proxy start<\/code><\/p>\n

systemd<\/strong> kullanan farkl\u0131 bir da\u011f\u0131t\u0131mda:
\n
\nkame ~ $<\/strong> systemctl enable dnscrypt-proxy
\nkame ~ $<\/strong> systemctl start dnscrypt-proxy <\/code><\/p>\n

yaparak ba\u015flatabilirsiniz.
\n
\n2. Elle kurulum<\/strong><\/p>\n

E\u011fer depolar\u0131n\u0131zda yok ise a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 ger\u00e7ekle\u015ftirin.<\/p>\n

kame ~ $<\/strong> wget -c http:\/\/download.dnscrypt.org\/dnscrypt-proxy\/dnscrypt-proxy-1.3.3.tar.gz<\/code>
\nkame ~ $<\/strong> tar xzf dnscrypt-proxy-1.3.3.tar.gz<\/code>
\nkame ~ $<\/strong> cd dnscrypt-proxy-1.3.3
\nkame ~ $<\/strong> .\/configure
\nkame ~ $<\/strong> make
\nkame ~ $<\/strong> sudo make install<\/code><\/p>\n

Bu a\u015famalar\u0131n herhangi birinde (make install hari\u00e7<\/em>) hata al\u0131rsan\u0131z mevcut hatay\u0131 aratarak eksik k\u00fct\u00fcphane veya paketleri kurman\u0131z gerekebilir.<\/p>\n

3. Kullan\u0131m<\/strong><\/p>\n

Kurulum a\u015famalar\u0131n\u0131 tamamlam\u0131\u015f iseniz art\u0131k kullan\u0131ma ge\u00e7ebiliriz. Statik IP ayarlar\u0131 yaparak kullan\u0131m\u0131n\u0131 g\u00f6sterece\u011fim. Sadece DNS sunucusuna yazarak da kullanabilirsiniz. Se\u00e7im size kalm\u0131\u015f.<\/p>\n

kame ~ $<\/strong> sudo ifconfig<\/code><\/p>\n

eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500\r\n        inet 192.168.1.3  netmask 255.255.255.0  broadcast 192.168.1.255\r\n        inet6 fe80::52e5:49ff:feda:8b5a  prefixlen 64  scopeid 0x20\r\n        ether 50:e5:49:da:8b:5a  txqueuelen 1000  (Ethernet)\r\n        RX packets 345058  bytes 405146897 (386.3 MiB)\r\n        RX errors 0  dropped 8  overruns 0  frame 0\r\n        TX packets 231282  bytes 53324829 (50.8 MiB)\r\n        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0<\/code><\/pre>\n
G\u00f6r\u00fcld\u00fc\u011f\u00fc \u00fczere eth0<\/strong> kullanm\u0131\u015f oldu\u011fum ba\u011flant\u0131m. inet de\u011feri ise bilgisayar\u0131m\u0131n ip’si. A\u011f y\u00f6neticiniz NetworkManager<\/strong> veya ba\u015fka bir \u015fey olabilir. A\u011f y\u00f6neticinizinde d\u00fczenlemek \u00fczerekulland\u0131\u011f\u0131n\u0131z ba\u011flant\u0131y\u0131 (eth0, wlan0 vs.<\/em>) a\u00e7\u0131n (\u00f6rne\u011fin Edit connections -> Ethernet (eth0) -> Edit -> IPv4 Settings<\/em>) ve:<\/p>\n
Adress: <\/strong>192.168.1.3
\nNetmask:<\/strong> 255.255.255.0
\nGateway:<\/strong> 192.168.1.1<\/code><\/p>\n
\u015feklinde d\u00fczenleyin. Son olarak DNS Servers<\/strong> (DNS sunucusu<\/em>) k\u0131sm\u0131na 127.0.0.1<\/strong> yaz\u0131n, kaydedin ve a\u011f y\u00f6neticinizi tekrar ba\u015flat\u0131n. 127.0.0.1, bizim yerel DNSCrypt proxymizdir. Bundan sonraki s\u00fcre\u00e7te art\u0131k trafi\u011fimiz \u015fifreli bir \u015fekilde akmaya ba\u015flayacakt\u0131r.<\/p>\n
Dikkat etminiz gereken en \u00f6nemli nokta DNSCrypt eri\u015fime engelli siteleri a\u015fmak i\u00e7in bir ara\u00e7 olmad\u0131\u011f\u0131d\u0131r. Veri trafi\u011fini en iyi \u015fekilde \u015fifrelemeye \u00e7al\u0131\u015fmakta fakat bu s\u00fcre\u00e7te IP’niz gizlenmiyor, yeriniz de\u011fi\u015fmiyor, Internete \u00e7\u0131k\u0131\u015f noktan\u0131z farkl\u0131l\u0131k g\u00f6stermiyor. Bunu kesinlikle akl\u0131n\u0131zdan \u00e7\u0131karmay\u0131n. Di\u011fer platformlar i\u00e7in indirme ba\u011flant\u0131lar\u0131 a\u015fa\u011f\u0131dad\u0131r:<\/p>\n