Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What firewall port(s) need to be open to allow access to external git repositories?

share|improve this question
up vote 37 down vote accepted

Specifically TCP 9418, no need for UDP.


share|improve this answer

It depends on the repository.

The native git transport uses TCP port 9418. However, git can also run over ssh (often used for pushing), http, https, and less often others.

You can look at the repository URL to find out which port it uses. Notice that many public repositories have several alternate URLs; for instance, the repositories have git://, http://, and https:// URLs.

The common URL schemes for git repositories are:

  • ssh:// - default port 22
  • git:// - default port 9418
  • http:// - default port 80
  • https:// - default port 443

If the URL does not have a scheme, it it using ssh with a slightly different syntax.

See the git fetch manpage for more details on the available URL schemes.

share|improve this answer

I've also found that the outbound SSH port 22 might need to be open as well as port 9418 for Git (both TCP). Depends on your setup though!

share|improve this answer
csf config for GIT TCP_IN = "9418" TCP_OUT = "9418,22" – AbdullahDiaa Nov 20 '13 at 9:07

Git uses port 9418. You can view connections using that port with

netstat -ntpl|grep -i 9418

Open 9418 and your traffic will pass through the firewall.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.