# Firebox – Renouvellement des certificats

**URL:** <https://community.letsencrypt.org/t/firebox-renouvellement-des-certificats/247344>\
**Category:** Aide (en français)\
**Created:** [May 19, 2026, 8:12am UTC](https://community.letsencrypt.org/t/firebox-renouvellement-des-certificats/247344 "2026-05-19T08:12:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![favchas](https://avatars.discourse-cdn.com/v4/letter/f/9de0a6/32.png) [@favchas](https://community.letsencrypt.org/u/favchas)\
**Post date:** [May 19, 2026, 8:12am UTC](https://community.letsencrypt.org/t/firebox-renouvellement-des-certificats/247344/1 "2026-05-19T08:12:15Z")

</div>

Bonjour,

Je me permets de vous contacter car nous appliquons des stratégies de filtrage géographique sur nos règles de firewall, et nous avons remarqué que le renouvellement des certificats ne fonctionne que lorsque celles‑ci sont désactivées.

Sachant que nous autorisons uniquement la France et les pays limitrophes au maximum,  
y a‑t‑il une possibilité d’obtenir la liste des pays utilisés pour le renouvellement des certificats, ou au moins une idée de la règle à créer afin d’autoriser uniquement le strict nécessaire ?

Merci beaucoup à vous,  
Cordialement.

---

<div class="post-metadata">

**Author:** ![hebbet](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/hebbet/32/21982_2.png) [@hebbet](https://community.letsencrypt.org/u/hebbet)\
**Post date:** [May 19, 2026, 8:51am UTC](https://community.letsencrypt.org/t/firebox-renouvellement-des-certificats/247344/2 "2026-05-19T08:51:03Z")

</div>

See FAQ

> [@Multi-Perspective Validation & Geoblocking FAQ](https://community.letsencrypt.org/t/multi-perspective-validation-geoblocking-faq/218158):
>
> (…

and similiar topic:

> [@Cyber-attacks from the secondary verification source addresses](https://community.letsencrypt.org/t/cyber-attacks-from-the-secondary-verification-source-addresses/247267/3):
>
> Y…

and general FAQ

> **[What IP addresses does Let’s Encrypt use to validate my web server? - FAQ](https://letsencrypt.org/docs/faq/#what-ip-addresses-does-let-s-encrypt-use-to-validate-my-web-server)**
>
> This FAQ is divided into the following sections:
> General Questions Technical Questions General Questions What services does Let’s Encrypt offer? Let’s Encrypt is a global Certificate Authority (CA). We let people and organizations around the world...

if you want to block http for non eu countries, you could have a look at DNS challange.

> **[DNS-01 challenge - Challenge Types](https://letsencrypt.org/docs/challenge-types/#dns-01-challenge)**
>
> When you get a certificate from Let’s Encrypt, our servers validate that you control the domain names in that certificate using “challenges,” as defined by the ACME standard. Most of the time, this validation is handled automatically by your ACME...

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [June 18, 2026, 8:52am UTC](https://community.letsencrypt.org/t/firebox-renouvellement-des-certificats/247344/3 "2026-06-18T08:52:02Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.