# "Firewall problem"?

**URL:** <https://community.letsencrypt.org/t/firewall-problem/152009>\
**Category:** Help\
**Created:** [May 18, 2021, 7:48pm UTC](https://community.letsencrypt.org/t/firewall-problem/152009 "2021-05-18T19:48:08Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![headrift](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/headrift/32/49773_2.png) [@headrift](https://community.letsencrypt.org/u/headrift)\
**Post date:** [May 18, 2021, 7:48pm UTC](https://community.letsencrypt.org/t/firewall-problem/152009/1 "2021-05-18T19:48:09Z")

</div>

Hello, my certs are about to expire. I've had them for years, but I'm getting a "firewall problem" error now. I've stopped iptables and fail2ban, double checked my DNS entries and basically am at a stuck point. I have two subdomains in use "[ampache.thechatpit.org](http://ampache.thechatpit.org)" and "[nextcloud.thechatpit.org](http://nextcloud.thechatpit.org)" but am not looking for a wildcard cert.

Please let me know if you need anything else.

My domain is: [thechatpit.org](http://thechatpit.org)

I ran this command: sudo certbot renew

It produced this output: Timeout during connect (likely firewall problem)

My web server is (include version): Server version: Apache/2.4.47 (Unix)

The operating system my web server runs on is (include version): Linux [thechatpit.org](http://thechatpit.org) 5.12.4-arch1-2 #1 SMP PREEMPT Sat, 15 May 2021 20:58:02 +0000 x86\_64 GNU/Linux

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): certbot 1.15.0

---

<div class="post-metadata">

**Author:** ![petercooperjr](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/petercooperjr/32/84698_2.png) [@petercooperjr](https://community.letsencrypt.org/u/petercooperjr)\
**Post date:** [May 18, 2021, 7:55pm UTC](https://community.letsencrypt.org/t/firewall-problem/152009/2 "2021-05-18T19:55:26Z")

</div>

It means just what it says; your web sites aren't accessible and need to be in order for Let's Encrypt to validate them. I can't get to them either. Some firewall or the like is blocking them, or the server isn't running.

---

<div class="post-metadata">

**Author:** ![headrift](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/headrift/32/49773_2.png) [@headrift](https://community.letsencrypt.org/u/headrift)\
**Post date:** [May 18, 2021, 8:11pm UTC](https://community.letsencrypt.org/t/firewall-problem/152009/3 "2021-05-18T20:11:03Z")

</div>

Yes, I just found the problem... port forwarding in the router. My bad, but thanks

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [June 17, 2021, 8:11pm UTC](https://community.letsencrypt.org/t/firewall-problem/152009/4 "2021-06-17T20:11:44Z")

</div>

Closed on June 17, 2021, 8:11pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.