How can I let Git push/pull through Windows 7 Firewall?

Question

My firewall is configured to deny all inbound and outbound traffic unless a rule says otherwise.

This answer suggests making rules for git.exe, sh.exe, and ssh.exe. So I did. Even bash.exe.

Still when I run git pull I see:

fatal: unable to access 'https://[email protected]/joncom/my-repo.git/': Failed connect to bitbucket.org:443; No error

If I allow outbound connections by default, everything works.

What rule am I missing?

Rap

Answer 1

I needed to add a rule for git-remote-https.exe because I'm authenticating via HTTPS, not SSH.

On new versions of git, this is located at: C:\Program Files\Git\mingw64\libexec\git-core\git-remote-https.exe.

Edit: In fact I disabled the rules for git.exe, sh.exe, ssh.exe, and bash.exe, and still everything works, so they seem unnecessary for my purposes.

Rap

I used the logging technique from here (serverfault.com/a/841940) to determine that indeed only git-remote-https.exe needs to be allowed (Outbound rule) in order to get https working on Windows 7. – Sharp

Answer 2

When using:

git submodule update

I had to allow $GIT_BASH_LOCATION/usr/bin/ssh.exe through the firewall. In almost all other cases it is not used.

Anchie

Answer 3

I had the same problem but since I don't have a git-remote-https.exe I needed to open the Ports for git. You need to open the ones described in this question here.

Battleship

Answer 4

If you're using Git for Windows and Putty, you should allow plink.exe

Arrearage