Certbot is not available from Belarus

Site Feedback
1

Hi all, web site certbot.eff.org is not available from Belarus. My inthernet provider is A1 (https://www.a1.by/en/)
I have spoken with the technical support of A1 and get the answer that they haven't any blocks on their side. This site worked well a few months ago.

pathping certbot.eff.org

Tracing route to lb5.eff.org [173.239.79.196]
over a maximum of 30 hops:
  0  host.docker.internal [192.168.1.60]
  1  192.168.1.1
  2  10.254.250.9
  3  10.254.167.243
  4  37.17.5.220
  5  msq.asr-mck.bn.by [212.98.161.130]
  6  185.11.76.22
  7  185.11.76.26
  8  et001.RT.NCT.GDO.BY.retn.net [87.245.242.102]
  9  ae1-5.RT.IRX.FKT.DE.retn.net [87.245.232.244]
 10  ae17.cr6-fra2.ip4.gtt.net [154.14.40.233]
 11  ae3.cr5-sjc1.ip4.gtt.net [89.149.180.38]
 12  ip4.gtt.net [69.174.10.122]
 13  140.Cr01-365m-SFO.unwiredltd.net [204.11.106.22]
 14  204.11.106.51
 15  vm1.eff.org [173.239.79.196]

Computing statistics for 375 seconds...
            Source to Here   This Node/Link
Hop  RTT    Lost/Sent = Pct  Lost/Sent = Pct  Address
  0                                           host.docker.internal [192.168.1.60]
                                0/ 100 =  0%   |
  1    0ms     0/ 100 =  0%     0/ 100 =  0%  192.168.1.1
                                0/ 100 =  0%   |
  2    1ms     0/ 100 =  0%     0/ 100 =  0%  10.254.250.9
                                0/ 100 =  0%   |
  3  ---     100/ 100 =100%   100/ 100 =100%  10.254.167.243
                                0/ 100 =  0%   |
  4    5ms     0/ 100 =  0%     0/ 100 =  0%  37.17.5.220
                                0/ 100 =  0%   |
  5    5ms     0/ 100 =  0%     0/ 100 =  0%  msq.asr-mck.bn.by [212.98.161.130]
                                0/ 100 =  0%   |
  6    5ms     0/ 100 =  0%     0/ 100 =  0%  185.11.76.22
                                0/ 100 =  0%   |
  7    5ms     0/ 100 =  0%     0/ 100 =  0%  185.11.76.26
                                0/ 100 =  0%   |
  8   13ms     0/ 100 =  0%     0/ 100 =  0%  et001.RT.NCT.GDO.BY.retn.net [87.245.242.102]
                                0/ 100 =  0%   |
  9   30ms     0/ 100 =  0%     0/ 100 =  0%  ae1-5.RT.IRX.FKT.DE.retn.net [87.245.232.244]
                                0/ 100 =  0%   |
 10   49ms     0/ 100 =  0%     0/ 100 =  0%  ae17.cr6-fra2.ip4.gtt.net [154.14.40.233]
                                0/ 100 =  0%   |
 11  ---     100/ 100 =100%   100/ 100 =100%  ae3.cr5-sjc1.ip4.gtt.net [89.149.180.38]
                                0/ 100 =  0%   |
 12  190ms     0/ 100 =  0%     0/ 100 =  0%  ip4.gtt.net [69.174.10.122]
                                0/ 100 =  0%   |
 13  188ms     0/ 100 =  0%     0/ 100 =  0%  140.Cr01-365m-SFO.unwiredltd.net [204.11.106.22]
                                0/ 100 =  0%   |
 14  191ms     1/ 100 =  1%     1/ 100 =  1%  204.11.106.51
                                0/ 100 =  0%   |
 15  193ms     0/ 100 =  0%     0/ 100 =  0%  vm1.eff.org [173.239.79.196]

Trace complete.

tracert certbot.eff.org

Tracing route to lb5.eff.org [173.239.79.196]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  192.168.1.1
  2     5 ms     3 ms     4 ms  10.254.250.9
  3     2 ms     4 ms     4 ms  10.254.167.243
  4     8 ms     9 ms    10 ms  37.17.5.220
  5     5 ms     5 ms     5 ms  msq.asr-mck.bn.by [212.98.161.130]
  6     7 ms     5 ms     5 ms  185.11.76.22
  7     6 ms     5 ms     5 ms  185.11.76.26
  8    12 ms     9 ms     9 ms  et001.RT.NCT.GDO.BY.retn.net [87.245.242.102]
  9    29 ms    29 ms    29 ms  ae1-5.RT.IRX.FKT.DE.retn.net [87.245.232.244]
 10    46 ms    47 ms    47 ms  ae17.cr6-fra2.ip4.gtt.net [154.14.40.233]
 11   193 ms   196 ms   192 ms  ae3.cr5-sjc1.ip4.gtt.net [89.149.180.38]
 12   191 ms   190 ms   190 ms  ip4.gtt.net [69.174.10.122]
 13   192 ms   191 ms   193 ms  140.Cr01-365m-SFO.unwiredltd.net [204.11.106.22]
 14   192 ms   197 ms   191 ms  204.11.106.51
 15   194 ms   193 ms   193 ms  vm1.eff.org [173.239.79.196]

Trace complete.
2 Likes
2

Welcome to the Let's Encrypt Community, Andrei :slightly_smiling_face:

I'll try to get you some help.

@certbot-devs

Any assistance you can provide here?

_az responded below.

3 Likes
3

Please show the exact error you are having.

3 Likes
4

It looks like the certbot.eff.org site could be a victim of tor.eff.org getting blocked, because they point to the same IP address.

https://explorer.ooni.org/search?until=2021-06-15&probe_cc=BY&domain=tor.eff.org&since=2021-05-01 suggests that it was blocked on May 27.

That said, the (only) probe is also from A1's network, so it could easily be a networking issue rather than an intentional block.

6 Likes
5

Thank you all for the help.

Just to summarise.
There are no issues on the cerbot site. The issue related to blocking tor.eff.org in the A1 network.
Am I right? If so, I will return to the discussion with my provider.

3 Likes
6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.