Letsdebug says A Not Working and cant renew certificates

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: albadizayn.com

I ran this command: letsdebug.net / also i use CWP autossl button

It produced this output:
letsdebut.net

ANotWorking
ERROR
albadizayn.com has an A (IPv4) record (80.93.209.81) but a request to this address over port 80 did not succeed. Your web server must have at least one working IPv4 or IPv6 address.
A timeout was experienced while communicating with albadizayn.com/80.93.209.81: Get "http://albadizayn.com/.well-known/acme-challenge/letsdebug-test": context deadline exceeded

Trace:
@0ms: Making a request to http://albadizayn.com/.well-known/acme-challenge/letsdebug-test (using initial IP 80.93.209.81)
@1ms: Dialing 80.93.209.81
@10000ms: Experienced error: context deadline exceeded

Autossl Log

DNS Redirection problem for albadizayn.com with www and without it

My web server is (include version): Apache/2.4.51 + nginx/1.20.2

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): cwp

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): acme v3.0.2

I am having this problem with every domain on same server. So i thought it's a firewall problem. I've completely disabled firewall (CSF) nothing change. I allowed 0.0.0.0/0 all ports in out nothing changed.

I'm stuck.

2

When I try to reach your site I get this error. Looks like a firewall is interfering (see ddos-guard):

curl -I  albadizayn.com

HTTP/1.1 504 Gateway Timeout
Server: ddos-guard
Date: Fri, 04 Feb 2022 15:07:00 GMT
Connection: keep-alive
Keep-Alive: timeout=60
Content-Type: text/html; charset=utf8
Content-Length: 583
1 Like
3

I can confirm this. Whatever server is behind your ddos-guard is not behaving the way you expect.

peppe@monolite:~$ curl -IL http://albadizayn.com/.well-known/acme-challenge/let
HTTP/1.1 504 Gateway Timeout
Server: ddos-guard
Date: Fri, 04 Feb 2022 15:08:33 GMT
Connection: keep-alive
Keep-Alive: timeout=60
Content-Type: text/html; charset=utf8
Content-Length: 583

peppe@monolite:~$
1 Like
4

Thanks for responses.

Thats my ISPs ddos guard and i am all whitelisted thats why i missed it

Again thanks for help I'm gonna try to make another rule to fix it.

2 Likes
5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.