Let's Encrypt could not renewal with private domain

[schoen]

@phongnx1

It’s work for me. (config port 80 and port 443 done)

http://bitbucket.its-lab.net/.well-known/acme-challenge/ => OK (I prepare file with text is “OK”)

I am not able to access these services at all. Are you testing from behind a firewall rather than from somewhere else on the Internet?

Furthermore, when I try to connect, I get back ICMP message type 3, code 10 (host administratively prohibited), which indicates that a firewall is intentionally blocking the connection.