What ports are used by git and stash?

Question

I have my Linux server set to block all ports except those I actively use.  It works, but I'm having trouble with Stash.  I've tried freeing 20-22 outgoing, 80, 1443, 9418 all incoming and outgoing, along with the http port and control port I use for my setup incoming and outgoing.  Those are the only ports I've seen show up using iptraf.

I am able to connect to my server and Stash from my PC.  I can login, it calculates what's needed for the push and begins to perform the push, actually sends all of the content, but then it fails after a long timeout with the message:

! [remote rejected] master -> master (pre-receive hook declined)
error: failed to push some refs to 'http://xyz@www.abc.org:####/scm/repo/repo.git'

If I go in and unblock all of the ports, then it works properly and completes the push like normal.  I can't figure out what port it's using.

Thank you in advance for your help.

Best regards,
Rick C. Hodgin

Stefan Saasen · Answer

Stash by default uses port 7990 for HTTP and port 7999 for SSH.

We don't use 22 or the git protocol port 9418 so there is no need to open up those for Stash (you may want to keep 22 if you are using the default SSH port to log into the machine).

Some useful documentation if you have plans to integrate a reverse proxy:

* https://confluence.atlassian.com/display/STASH/Proxying+and+securing+Stash
* https://confluence.atlassian.com/display/STASH/Setting+up+SSH+port+forwarding

Tim Crall1 · Answer

Git uses HTTP (80), HTTPS (443), or SSH (22) depending on how the remote is configured.

This post refers also to a git:// protocol that typically runs on 9418: http://serverfault.com/questions/189070/what-firewall-ports-need-to-be-open-to-allow-access-to-external-git-repositories

Stash is configurable but by default uses 7990 and 8006: https://confluence.atlassian.com/display/STASH/Changing+the+port+that+Stash+listens+on