# Timeout during connect (likely firewall problem)

**URL:** <https://community.letsencrypt.org/t/timeout-during-connect-likely-firewall-problem/111756>\
**Category:** Help\
**Created:** [January 28, 2020, 11:17pm UTC](https://community.letsencrypt.org/t/timeout-during-connect-likely-firewall-problem/111756 "2020-01-28T23:17:18Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![aol](https://avatars.discourse-cdn.com/v4/letter/a/46a35a/32.png) [@aol](https://community.letsencrypt.org/u/aol)\
**Post date:** [January 28, 2020, 11:17pm UTC](https://community.letsencrypt.org/t/timeout-during-connect-likely-firewall-problem/111756/1 "2020-01-28T23:17:18Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

**I ran this command:**  
certbot renew --dry-run

**It produced this output:**  
Saving debug log to /var/log/letsencrypt/letsencrypt.log

* * *

Processing /etc/letsencrypt/renewal/e3.dtadata.com.conf

* * *

Cert is due for renewal, auto-renewing…  
Plugins selected: Authenticator apache, Installer apache  
Starting new HTTPS connection (1): [acme-staging-v02.api.letsencrypt.org](http://acme-staging-v02.api.letsencrypt.org)  
Renewing an existing certificate  
Performing the following challenges:  
http-01 challenge for [e3.dtadata.com](http://e3.dtadata.com)  
Waiting for verification…  
Challenge failed for domain [e3.dtadata.com](http://e3.dtadata.com)  
http-01 challenge for [e3.dtadata.com](http://e3.dtadata.com)  
Cleaning up challenges  
Attempting to renew cert ([e3.dtadata.com](http://e3.dtadata.com)) from /etc/letsencrypt/renewal/e3.dtadata.com.conf produced an unexpected error: Some challenges have failed… Skipping.  
All renewal attempts failed. The following certs could not be renewed:  
/etc/letsencrypt/live/e3.dtadata.com/fullchain.pem (failure)

* * *

\*\* DRY RUN: simulating ‘certbot renew’ close to cert expiry  
\*\* (The test certificates below have not been saved.)

All renewal attempts failed. The following certs could not be renewed:  
/etc/letsencrypt/live/e3.dtadata.com/fullchain.pem (failure)  
\*\* DRY RUN: simulating ‘certbot renew’ close to cert expiry  
\*\* (The test certificates above have not been saved.)

* * *

1 renew failure(s), 0 parse failure(s)

IMPORTANT NOTES:

- The following errors were reported by the server:

**My web server is (include version):** Apache 2.4.6

The operating system my web server runs on is (include version): CentOS 7

My hosting provider, if applicable, is:

**I can login to a root shell on my machine (yes or no, or I don’t know):** yes

**I’m using a control panel to manage my site:** no

**The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you’re using Certbot):** certbot 0.38.0

---

<div class="post-metadata">

**Author:** ![LuB](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/lub/32/35871_2.png) [@LuB](https://community.letsencrypt.org/u/LuB)\
**Post date:** [January 29, 2020, 2:09am UTC](https://community.letsencrypt.org/t/timeout-during-connect-likely-firewall-problem/111756/2 "2020-01-29T02:09:32Z")

</div>

Interesting...

Can you please run this command

> certbot certifcates

And post the results

Cheers

---

<div class="post-metadata">

**Author:** ![mnordhoff](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mnordhoff/32/22583_2.png) [@mnordhoff](https://community.letsencrypt.org/u/mnordhoff)\
**Post date:** [January 29, 2020, 5:58am UTC](https://community.letsencrypt.org/t/timeout-during-connect-likely-firewall-problem/111756/3 "2020-01-29T05:58:25Z")

</div>

Trying to connect to [http://e3.dtadata.com/](http://e3.dtadata.com/) times out for me too.

Is there a firewall blocking port 80?

Can you connect to it?

From other ISPs?

I can’t even ping your IP, but I can access other IPs on the same /24, so it seems like it’s probably a firewall issue.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [February 28, 2020, 5:58am UTC](https://community.letsencrypt.org/t/timeout-during-connect-likely-firewall-problem/111756/4 "2020-02-28T05:58:32Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
