# Question on renewal and what Countries are connecting **URL:** \ **Category:** Help\ **Created:** [June 6, 2024, 12:17am UTC](https://community.letsencrypt.org/t/question-on-renewal-and-what-countries-are-connecting/219598 "2024-06-06T00:17:40Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Warezkid](https://avatars.discourse-cdn.com/v4/letter/w/6bbea6/32.png) [@Warezkid](https://community.letsencrypt.org/u/Warezkid)\ **Post date:** [June 6, 2024, 12:17am UTC](https://community.letsencrypt.org/t/question-on-renewal-and-what-countries-are-connecting/219598/1 "2024-06-06T00:17:40Z")
I would like to know specifically which Country or Countries certbot is using to check for connectivity to do the acme-challenge? I have country restrictions on ~150 countries blocked from incoming traffic and this prevents certbot from completing its task, once disabled there is no issue with renewal as I have port forwarding to the reverse proxy that I use temporarily enabled on port 80, and shutting off the ufw temporarily while certbot runs but until the country restrictions are off it will not complete and claim "likely firewall related" ---
**Author:** ![mcpherrinm](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mcpherrinm/32/59604_2.png) [@mcpherrinm](https://community.letsencrypt.org/u/mcpherrinm)\ **Post date:** [June 6, 2024, 12:26am UTC](https://community.letsencrypt.org/t/question-on-renewal-and-what-countries-are-connecting/219598/2 "2024-06-06T00:26:58Z")
Currently: USA, Sweden, Singapore. We will likely add some more countries eventually, as the CA regulations will require 6 vantage points in the coming years. The non-US locations are all currently AWS but that may also change. ---
**Author:** ![Warezkid](https://avatars.discourse-cdn.com/v4/letter/w/6bbea6/32.png) [@Warezkid](https://community.letsencrypt.org/u/Warezkid)\ **Post date:** [June 6, 2024, 12:37am UTC](https://community.letsencrypt.org/t/question-on-renewal-and-what-countries-are-connecting/219598/3 "2024-06-06T00:37:17Z")
Appreciate it!! could this be somewhere in the FAQ? I seem to forget how to renew every 3 months 😅 because of the network setup I have. ---
**Author:** ![aarongable](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/aarongable/32/42043_2.png) [@aarongable](https://community.letsencrypt.org/u/aarongable)\ **Post date:** [June 6, 2024, 1:18am UTC](https://community.letsencrypt.org/t/question-on-renewal-and-what-countries-are-connecting/219598/4 "2024-06-06T01:18:31Z")
It's important to note that this list of countries can -- and will -- change and grow with no notice. If possible, examine why you are blocking traffic from countries other than the US, and see if it is truly necessary. Also, see if your geo-blocking firewall is capable of not blocking traffic specifically to the /.well-known/acme-challenge/ sub path. If you do one of those, then you won't have to manually unblock whatever countries we happen to be using when you go to renew. ---
**Author:** ![petercooperjr](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/petercooperjr/32/84698_2.png) [@petercooperjr](https://community.letsencrypt.org/u/petercooperjr)\ **Post date:** [June 6, 2024, 1:28am UTC](https://community.letsencrypt.org/t/question-on-renewal-and-what-countries-are-connecting/219598/5 "2024-06-06T01:28:40Z")
There's an unofficial community geoblocking FAQ that may be helpful. > [@Multi-Perspective Validation & Geoblocking FAQ](https://community.letsencrypt.org/t/multi-perspective-validation-geoblocking-faq/218158/1): > > (… I don't know if you already saw it and that's the FAQ you were trying to say should include more details on the current set of locations, or if you're talking about the official FAQ. ---
**Author:** ![Warezkid](https://avatars.discourse-cdn.com/v4/letter/w/6bbea6/32.png) [@Warezkid](https://community.letsencrypt.org/u/Warezkid)\ **Post date:** [June 6, 2024, 3:42pm UTC](https://community.letsencrypt.org/t/question-on-renewal-and-what-countries-are-connecting/219598/6 "2024-06-06T15:42:44Z")
Mainly, I am not hosting a website for all, it is for development and I and a few other countries require access to it, I just don't like seeing all these suspicious activity logs from all over, thus blocking the incoming countries should mitigate some attacks/attempts at accessing my network. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [July 6, 2024, 3:43pm UTC](https://community.letsencrypt.org/t/question-on-renewal-and-what-countries-are-connecting/219598/7 "2024-07-06T15:43:06Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.