The way to connect Lets Encrypt when some of it's IPs are blocked by a FireWall

[webprofusion]

Another solution is to use DNS validation instead of http validation, that way you don't need to open your firewall at all.