# Firewall issue after cerbot update? **URL:** \ **Category:** Help\ **Created:** [February 5, 2021, 9:28am UTC](https://community.letsencrypt.org/t/firewall-issue-after-cerbot-update/144583 "2021-02-05T09:28:14Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![helloha](https://avatars.discourse-cdn.com/v4/letter/h/96bed5/32.png) [@helloha](https://community.letsencrypt.org/u/helloha)\ **Post date:** [February 5, 2021, 9:28am UTC](https://community.letsencrypt.org/t/firewall-issue-after-cerbot-update/144583/1 "2021-02-05T09:28:14Z")
Hello, using certbot for over a year now, updating the certificate was never an issue. Certbot was updated last week or so and now I'm getting this error. Any ideas? My domain is still up and running. From outside as well. It only expires in about 18 days. Thanks for any help! My domain is: [xxxx.ddns.net](http://xxxx.ddns.net) I ran this command: certbot renew It produced this output: Cert is due for renewal, auto-renewing... Plugins selected: Authenticator apache, Installer apache Starting new HTTPS connection (1): [acme-v02.api.letsencrypt.org](http://acme-v02.api.letsencrypt.org) Renewing an existing certificate for [xxxxx.ddns.net](http://xxxxx.ddns.net) Performing the following challenges: http-01 challenge for [xxxx.ddns.net](http://xxxx.ddns.net) Waiting for verification... Challenge failed for domain [xxxx.ddns.net](http://xxxx.ddns.net) http-01 challenge for [xxxx.ddns.net](http://xxxx.ddns.net) Cleaning up challenges Failed to renew certificate [xxxx.ddns.net](http://xxxx.ddns.net) with error: Some challenges have failed. * * * All renewals failed. The following certificates could not be renewed: /etc/letsencrypt/live/xxxxx.ddns.net/fullchain.pem (failure) * * * 1 renew failure(s), 0 parse failure(s) IMPORTANT NOTES: - The following errors were reported by the server: My web server is (include version): Centos 7 The operating system my web server runs on is (include version): 3.10.0-1160.11.1.el7.x86\_64 My hosting provider, if applicable, is: I can login to a root shell on my machine (yes or no, or I don't know): yes I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): certbot 1.11.0 ---
**Author:** ![\_az](https://avatars.discourse-cdn.com/v4/letter/_/22d042/32.png) [@\_az](https://community.letsencrypt.org/u/_az)\ **Post date:** [February 5, 2021, 9:36am UTC](https://community.letsencrypt.org/t/firewall-issue-after-cerbot-update/144583/2 "2021-02-05T09:36:22Z")
Certbot doesn't touch your firewall unless you have scripted it to, so I think it's best to treat this as a generic network connectivity issue instead. Right now, I can't connect to your website on port 80. It just times out. The certificate renewal process needs port 80 to be accessible. A few things to check: - You haven't closed port 80 on any firewalls and that any port forwarding is still in place - That `81.244.67.194` is your current IP address - That Belgacom haven't started blocking port 80 ---
**Author:** ![helloha](https://avatars.discourse-cdn.com/v4/letter/h/96bed5/32.png) [@helloha](https://community.letsencrypt.org/u/helloha)\ **Post date:** [February 5, 2021, 9:50am UTC](https://community.letsencrypt.org/t/firewall-issue-after-cerbot-update/144583/3 "2021-02-05T09:50:25Z")
Thanks for the feedback, I did a full router reset and forgot to portmap port 80 (I only use https so things worked fine until now). Thanks! K. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [March 7, 2021, 9:51am UTC](https://community.letsencrypt.org/t/firewall-issue-after-cerbot-update/144583/4 "2021-03-07T09:51:08Z")
Closed on March 7, 2021, 9:51am UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.