# DNS problem: query timed out looking up A **URL:** \ **Category:** Help\ **Created:** [January 25, 2021, 4:38am UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568 "2021-01-25T04:38:35Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![MrNovo](https://avatars.discourse-cdn.com/v4/letter/m/d9b06d/32.png) [@MrNovo](https://community.letsencrypt.org/u/MrNovo)\ **Post date:** [January 25, 2021, 4:38am UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/1 "2021-01-25T04:38:35Z")
Hi, I'm facing this issue for 3 days now. I've over 300 accounts on my server never had an issue since 23th i'm having this issue no matter domain is. Same thing occurs in another server of mine with same specs. Can someone point me to the right direction. My domain is: [e-fotograf.com](http://e-fotograf.com) I ran this command: It produced this output: Verify error:During secondary validation: DNS problem: query timed out looking up A for [e-fotograf.com](http://e-fotograf.com) My web server is (include version): Apache/2.4.39 The operating system my web server runs on is (include version): CentOS 7.9.2009 I can login to a root shell on my machine (yes or no, or I don't know): Yes I'm using a control panel to manage my site (no, or provide the name and version of the control panel): CWP The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): ---
**Author:** ![Litbelb](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/litbelb/32/46707_2.png) [@Litbelb](https://community.letsencrypt.org/u/Litbelb)\ **Post date:** [January 25, 2021, 4:42am UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/2 "2021-01-25T04:42:24Z")
We can't really help you troubleshoot without the command you ran. Can you please give us the command you ran? ---
**Author:** ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)\ **Post date:** [January 25, 2021, 7:16am UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/3 "2021-01-25T07:16:08Z")
Welcome to the Let's Encrypt Community, Bahadır 🙂 You're seeing a _ **secondary** validation failure_, which is almost always a sign of a firewall problem (either yours or regional). Occasionally, but rarely, this is a sign of DNS server issues. ---
**Author:** ![MrNovo](https://avatars.discourse-cdn.com/v4/letter/m/d9b06d/32.png) [@MrNovo](https://community.letsencrypt.org/u/MrNovo)\ **Post date:** [January 25, 2021, 8:00am UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/4 "2021-01-25T08:00:29Z")
@Litbelb i use CWP UI but since you asked and i forgot to add command i've tried command below and got the same error. ``` sh /root/.acme.sh/acme.sh --home /root/.acme.sh/cwp_certs --issue -d www.e-fotograf.com -d e-fotograf.com -w /usr/local/apache/autossl_tmp ``` @griffin thanks for welcome 🙂 I've disabled all firewalls in one server including ISP's firewall. Nothing changed. I believe thats a DNS server issue too but can't find a way to fix it or define the exact problem. ---
**Author:** ![MrNovo](https://avatars.discourse-cdn.com/v4/letter/m/d9b06d/32.png) [@MrNovo](https://community.letsencrypt.org/u/MrNovo)\ **Post date:** [January 25, 2021, 8:36am UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/5 "2021-01-25T08:36:51Z")
Additional info; I'm able to renew previously generated cert... If this is a DNS problem, i have to get same error for renewals too, right ? ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [January 25, 2021, 2:07pm UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/6 "2021-01-25T14:07:28Z")
Not necessarily. Reissuing recently issued cert might bypass the need for rigorous DNS verification. Is there one common DNS system used for all the problematic domains? ---
**Author:** ![jmorahan](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jmorahan/32/1873_2.png) [@jmorahan](https://community.letsencrypt.org/u/jmorahan)\ **Post date:** [January 25, 2021, 6:57pm UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/7 "2021-01-25T18:57:54Z")
Split this topic on January 25, 2021, 6:57pm UTC A post was split to a new topic: [Query timed out looking up A](https://community.letsencrypt.org/t/query-timed-out-looking-up-a/143624) ---
**Author:** ![MrNovo](https://avatars.discourse-cdn.com/v4/letter/m/d9b06d/32.png) [@MrNovo](https://community.letsencrypt.org/u/MrNovo)\ **Post date:** [January 25, 2021, 6:22pm UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/8 "2021-01-25T18:22:07Z")
I ve contacted ISP they have no idea either. As far as we know there are several ISPs from Turkey having same problem with different users. I am the only one having this problem with my ISP Not sure but seems like this is not an issue caused by my DNS settings which never changed and was working couple days ago. ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [January 25, 2021, 6:53pm UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/9 "2021-01-25T18:53:41Z")
Well then you could wait for the problem to go away (much as it came - mysteriously). OR You could add some DNS servers far outside of your country/problem area. There are plenty of global DNS service providers and some will even do it for free. I can personally recommend: > **[Free DNS hosting, Cloud DNS hosting and Domain names | ClouDNS](https://www.cloudns.net/)** > > Free DNS, Cloud DNS, Managed DNS, GeoDNS and DDoS Protected DNS hosting with included web redirects, mail forwards and Round-Robin load balancing. Instant updates in Europe, North and South America, Asia and Australia. > **[VPS sýndarþjónar & vefhýsingarpakkar - 1984 Vefhýsing](https://www.1984.is/)** OR Host your own additional DNS server in any cloud type service (but outside the problem area). ---
**Author:** ![Rip](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rip/32/70863_2.png) [@Rip](https://community.letsencrypt.org/u/Rip)\ **Post date:** [January 25, 2021, 7:07pm UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/10 "2021-01-25T19:07:40Z")
You had me at **1,000% uptime** ---
**Author:** ![MrNovo](https://avatars.discourse-cdn.com/v4/letter/m/d9b06d/32.png) [@MrNovo](https://community.letsencrypt.org/u/MrNovo)\ **Post date:** [January 25, 2021, 7:09pm UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/11 "2021-01-25T19:09:03Z")
I was planing that but not sure if that will work since validation looks for A record and it will point same IP address. Is it a lookup problem or is something blocking validation requests. ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [January 25, 2021, 7:09pm UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/12 "2021-01-25T19:09:14Z")
I take no chances! I use 11 name servers across the planet - my stuff never fails to resolve 😉 ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [January 25, 2021, 7:09pm UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/13 "2021-01-25T19:09:39Z")
This is the problem that will address: > [@MrNovo](#): > > DNS problem: query timed out looking up A ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [January 25, 2021, 7:11pm UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/14 "2021-01-25T19:11:45Z")
> [@MrNovo](#): > > Is it a lookup problem or is something blocking validation requests. There may be two problems; But we need to tackle them one at a time 🙂 ---
**Author:** ![MrNovo](https://avatars.discourse-cdn.com/v4/letter/m/d9b06d/32.png) [@MrNovo](https://community.letsencrypt.org/u/MrNovo)\ **Post date:** [January 25, 2021, 9:01pm UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/15 "2021-01-25T21:01:38Z")
Not surprised. It worked. Here is what i've done. 1. Created zone for domain in a different datacenter with same DNS settings 2. Added A record points to my problematic server 3. Changed nameserver's to other server 4. Installed SSL on my server. Success. After this i've changed NS records back to my server and able to work with domain also able to renew SSL through auto installer UI So now the question is why Letsencrypt can perform a DNS lookup for A record on my server. I've checked most known web sited for my record all works fine except MXToolbox. MXToolbox result are a bit confusing too, may throw an error "Not able to get a response from name servers within timeframe" ---
**Author:** ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)\ **Post date:** [January 25, 2021, 10:04pm UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/16 "2021-01-25T22:04:19Z")
I think this has a lot to do with the locations of and systems in between the querying and queried systems. ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [January 25, 2021, 10:35pm UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/17 "2021-01-25T22:35:10Z")
Or an IPS / fail2ban type program running somewhere inline. ---
**Author:** ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)\ **Post date:** [January 25, 2021, 10:35pm UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/18 "2021-01-25T22:35:59Z")
Potato - Potato 🙃 ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [January 25, 2021, 10:37pm UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/19 "2021-01-25T22:37:55Z")
Funny how the mind sees things I read that clearly as po-tay-toe - po-tah-toe ---
**Author:** ![MrNovo](https://avatars.discourse-cdn.com/v4/letter/m/d9b06d/32.png) [@MrNovo](https://community.letsencrypt.org/u/MrNovo)\ **Post date:** [January 26, 2021, 11:36am UTC](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568/20 "2021-01-26T11:36:41Z")
Finally. After bunch of tests I made sure that the problem is not on my settings. Make ISP to check blockings again. They've changed some rules which i'm not sure what they have done but everything works fine now. Thanks for everyone took time to reply and help me. Regards. [Next page](https://community.letsencrypt.org/t/dns-problem-query-timed-out-looking-up-a/143568.md?page=2)