# Git Update for Windows - Cloudflare Direct IP

3 messages from 2024-07-08 to 2024-07-10. Participants: Adam Pickett, brian m. carlson.
Thread: https://gitlist.dev/t/61754

## Adam Pickett, 2024-07-08 13:20

Subject: Git Update for Windows - Cloudflare Direct IP
Message-ID: <DU0PR02MB9942C645E78AC23619F05D0CA0DA2@DU0PR02MB9942.eurprd02.prod.outlook.com>
URL: https://gitlist.dev/e/DU0PR02MB9942C645E78AC23619F05D0CA0DA2%40DU0PR02MB9942.eurprd02.prod.outlook.com

```
Hello Everyone,

I'm having an issue running 'git update-git-for-windows'

I get the following error; curl: (35) Recv failure: Connection was reset.

When speaking to my network team that have advised that they are seeing and error from Cloudflare.

Error 1003 - Direct IP access not allowed
A valid host header must be supplied to reach the desired website.
172.67.12.172

Can anyone confirm if this is a general issue or limited to our network.

Kind Regards

Adam Pickett



```

## brian m. carlson, 2024-07-08 21:54

Subject: Re: Git Update for Windows - Cloudflare Direct IP
Message-ID: <ZoxgCya4xt5JuLJP@tapette.crustytoothpaste.net>
URL: https://gitlist.dev/e/ZoxgCya4xt5JuLJP%40tapette.crustytoothpaste.net
In-Reply-To: <DU0PR02MB9942C645E78AC23619F05D0CA0DA2@DU0PR02MB9942.eurprd02.prod.outlook.com>

```
On 2024-07-08 at 13:20:12, Adam Pickett wrote:
> Hello Everyone,
> 
> I'm having an issue running 'git update-git-for-windows'
> 
> I get the following error; curl: (35) Recv failure: Connection was reset.
> 
> When speaking to my network team that have advised that they are seeing and error from Cloudflare.
> 
> Error 1003 - Direct IP access not allowed
> A valid host header must be supplied to reach the desired website.
> 172.67.12.172
> 
> Can anyone confirm if this is a general issue or limited to our network.

It sounds like you're writing about Git for Windows, which is maintained
separately at https://github.com/git-for-windows/git/.  You'd probably
want to report this there, since the utility you're describing isn't a
part of core Git.

I will just say that it sounds like you have some sort of corporate
proxy which is intercepting and tampering with the request, because I'm
pretty sure Git for Windows is using TLS for updates and therefore must
have provided a valid domain to curl.  If so, you'll want to try without
that proxy first, since if it _is_ the cause, obviously the Git for
Windows project won't be able to fix it.
-- 
brian m. carlson (they/them or he/him)
Toronto, Ontario, CA

```

## Adam Pickett, 2024-07-10 17:34

Subject: RE: Git Update for Windows - Cloudflare Direct IP
Message-ID: <DU0PR02MB99425B9202C3814BFB62413EA0A42@DU0PR02MB9942.eurprd02.prod.outlook.com>
URL: https://gitlist.dev/e/DU0PR02MB99425B9202C3814BFB62413EA0A42%40DU0PR02MB9942.eurprd02.prod.outlook.com
In-Reply-To: <ZoxgCya4xt5JuLJP@tapette.crustytoothpaste.net>

```
Thank you, I will follow this up further with them prior to reporting over there.

Kind Regards

Adam Pickett

-----Original Message-----
From: brian m. carlson <sandals@crustytoothpaste.net> 
Sent: Monday, July 8, 2024 10:54 PM
To: Adam Pickett <apickett@envirovent.com>
Cc: git@vger.kernel.org
Subject: Re: Git Update for Windows - Cloudflare Direct IP

On 2024-07-08 at 13:20:12, Adam Pickett wrote:
> Hello Everyone,
> 
> I'm having an issue running 'git update-git-for-windows'
> 
> I get the following error; curl: (35) Recv failure: Connection was reset.
> 
> When speaking to my network team that have advised that they are seeing and error from Cloudflare.
> 
> Error 1003 - Direct IP access not allowed A valid host header must be 
> supplied to reach the desired website.
> 172.67.12.172
> 
> Can anyone confirm if this is a general issue or limited to our network.

It sounds like you're writing about Git for Windows, which is maintained separately at https://github.com/git-for-windows/git/.  You'd probably want to report this there, since the utility you're describing isn't a part of core Git.

I will just say that it sounds like you have some sort of corporate proxy which is intercepting and tampering with the request, because I'm pretty sure Git for Windows is using TLS for updates and therefore must have provided a valid domain to curl.  If so, you'll want to try without that proxy first, since if it _is_ the cause, obviously the Git for Windows project won't be able to fix it.
--
brian m. carlson (they/them or he/him)
Toronto, Ontario, CA

```
