# Redirect letyscrypts requests

**URL:** https://community.letsencrypt.org/t/redirect-letyscrypts-requests/80416
**Category:** Help
**Created:** [December 18, 2018, 11:51am UTC](https://community.letsencrypt.org/t/redirect-letyscrypts-requests/80416 "2018-12-18T11:51:45Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![cdv](https://avatars.discourse-cdn.com/v4/letter/c/bb73d2/32.png) [@cdv](https://community.letsencrypt.org/u/cdv)
#### Post date: [December 18, 2018, 11:51am UTC](https://community.letsencrypt.org/t/redirect-letyscrypts-requests/80416/1 "2018-12-18T11:51:45Z")

</div>

Hi  
My domain is: [gazpromenergosbyt.ru](http://gazpromenergosbyt.ru)  
I want my email server (Altn Mdaemon) use LetsEncrypt.  
But i have a problem.  
Mdaemon server have imbedded script for letsencrypt, but it work only for 80 port.  
I have cisco asa, which redirects all requests [gazpromenergosbyt.ru:80](http://gazpromenergosbyt.ru:80) - site company to server1.  
I want your source (letsencrypt) [gazpromenegosbyt.ru:80](http://gazpromenegosbyt.ru:80) redirect to mdaemon server2. What ip letsencrypt use?

---

<div class="post-metadata">

### Author: ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)
#### Post date: [December 18, 2018, 1:56pm UTC](https://community.letsencrypt.org/t/redirect-letyscrypts-requests/80416/2 "2018-12-18T13:56:23Z")

</div>

Hi @cdv

> [@cdv](#):
>
> What ip letsencrypt use?

Letsencrypt doesn't use fixed ip addresses to check the files http-01 - validation requires.

See the FAQ:

> **[FAQ - Let's Encrypt](https://letsencrypt.org/docs/faq/)**
>
> This FAQ is divided into the following sections:
> General Questions Technical Questions General Questions What services does Let’s Encrypt offer? Let’s Encrypt is a global Certificate Authority (CA). We let people and organizations...

> What IP addresses does Let’s Encrypt use to validate my web server?
> 
> We don’t publish a list of IP addresses we use to validate, because they may change at any time. In the future we may validate from multiple IP addresses at once.

Isn't it possible to redirect all requests /.well-known/acme-challenge to mdaemon server2?

Or is dns-01 - validation a better solution?

---

<div class="post-metadata">

### Author: ![cdv](https://avatars.discourse-cdn.com/v4/letter/c/bb73d2/32.png) [@cdv](https://community.letsencrypt.org/u/cdv)
#### Post date: [December 18, 2018, 2:54pm UTC](https://community.letsencrypt.org/t/redirect-letyscrypts-requests/80416/3 "2018-12-18T14:54:25Z")

</div>

> [@JuergenAuer](#):
>
> Isn’t it possible to redirect all requests /.well-known/acme-challenge to mdaemon server2?

my equipment does not allow such redirect. need a deep analysis of traffic...

> [@JuergenAuer](#):
>
> Or is dns-01 - validation a better solution?

Unfortunately, there is no built-in use of dns-01 in the mail server (altn mdaemon. Only http-01).  
if there are more options I will be grateful .. I will also try to manually use dns-01

---

<div class="post-metadata">

### Author: ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)
#### Post date: [December 18, 2018, 3:59pm UTC](https://community.letsencrypt.org/t/redirect-letyscrypts-requests/80416/4 "2018-12-18T15:59:34Z")

</div>

> [@cdv](#):
>
> my equipment does not allow such redirect. need a deep analysis of traffic…

To be clear: The redirection is not request to happen in the firewall.  
It should happen at the internal server that accepts the port 80 connections.  
It would simply proxy those challenge requests to your email server.

---

<div class="post-metadata">

### Author: ![cdv](https://avatars.discourse-cdn.com/v4/letter/c/bb73d2/32.png) [@cdv](https://community.letsencrypt.org/u/cdv)
#### Post date: [December 19, 2018, 10:14am UTC](https://community.letsencrypt.org/t/redirect-letyscrypts-requests/80416/5 "2018-12-19T10:14:26Z")

</div>

> [@rg305](#):
>
> To be clear: The redirection is not request to happen in the firewall.  
> It should happen at the internal server that accepts the port 80 connections.  
> It would simply proxy those challenge requests to your email server.

Big thanks.  
I use my iis to redirect 80(server1) to 443 (server2 mdaemon) and it work good.

---

<div class="post-metadata">

### Author: ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)
#### Post date: [January 18, 2019, 10:14am UTC](https://community.letsencrypt.org/t/redirect-letyscrypts-requests/80416/6 "2019-01-18T10:14:35Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
