Timeout during connect (likely firewall problem)

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
finance.gkp.pk

I ran this command:
sudo certbot --nginx

It produced this output:
Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems:
Domain: ebills.finance.gkp.pk
Type: connection
Detail: 175.107.63.149: Fetching http://ebills.finance.gkp.pk/.well-known/acme-challenge/zP2QGlWn54kBAqMtSBYc4j51nDV8YOaQXxp4NSTcTFY: Timeout during connect (likely firewall problem)

Domain: finance.gkp.pk
Type: connection
Detail: 175.107.63.149: Fetching http://finance.gkp.pk/.well-known/acme-challenge/o6H2kCt9J0iwPZUwLIvyd9DAbXAgA8BfzT0BhfD19fo: Timeout during connect (likely firewall problem)

Domain: fmr.finance.gkp.pk
Type: connection
Detail: 175.107.63.149: Fetching http://fmr.finance.gkp.pk/.well-known/acme-challenge/aL2QxPvZ0CkQKZoEbonh58aHIkP9l8vRDlzEBFTUBuo: Timeout during connect (likely firewall problem)

Domain: gfc.finance.gkp.pk
Type: connection
Detail: 175.107.63.149: Fetching http://gfc.finance.gkp.pk/.well-known/acme-challenge/UfGxedpnOGnZoBPqanXOHkuPjuRIng1yn2PJUJwhIoU: Timeout during connect (likely firewall problem)

Domain: mis.finance.gkp.pk
Type: connection
Detail: 175.107.63.149: Fetching http://mis.finance.gkp.pk/.well-known/acme-challenge/EwyGpnBMpBBAf2ye-AfNmN4ljyGB4VwesXZWKoGLknQ: Timeout during connect (likely firewall problem)

Domain: om.finance.gkp.pk
Type: connection
Detail: 175.107.63.149: Fetching http://om.finance.gkp.pk/.well-known/acme-challenge/S9RsgHYmRhl-GDz45BD5Rmk5BmyOsty5MX4llvdnqs8: Timeout during connect (likely firewall problem)

Domain: www.ebills.finance.gkp.pk
Type: connection
Detail: 175.107.63.149: Fetching http://www.ebills.finance.gkp.pk/.well-known/acme-challenge/5OlyydmRSrpEdHt9zNuiwc5ykGDHbCiNjZAkaeA6sRs: Timeout during connect (likely firewall problem)

Domain: www.finance.gkp.pk
Type: connection
Detail: 175.107.63.149: Fetching http://www.finance.gkp.pk/.well-known/acme-challenge/8oxZoRxkSwBK7AFG6zmIX6SPTt1fdfmGMXjbMcuG9zs: Timeout during connect (likely firewall problem)

Domain: www.fmr.finance.gkp.pk
Type: connection
Detail: 175.107.63.149: Fetching http://www.fmr.finance.gkp.pk/.well-known/acme-challenge/zoP8__6rfZ9gPketuAjviTm-3LFweE_LOEPmtK_xUKM: Timeout during connect (likely firewall problem)

Domain: www.gfc.finance.gkp.pk
Type: connection
Detail: 175.107.63.149: Fetching http://www.gfc.finance.gkp.pk/.well-known/acme-challenge/VxHJk2OBDJqtfKDQ3CLxqL9AHjTVon05CJIIhwZgdoM: Timeout during connect (likely firewall problem)

Domain: www.mis.finance.gkp.pk
Type: connection
Detail: 175.107.63.149: Fetching http://www.mis.finance.gkp.pk/.well-known/acme-challenge/BEK30rfFwsijJfT6kTDIu6dvTk3Ms0I949EtLGKfcAY: Timeout during connect (likely firewall problem)

Domain: www.om.finance.gkp.pk
Type: connection
Detail: 175.107.63.149: Fetching http://www.om.finance.gkp.pk/.well-known/acme-challenge/Og1DHMaUFe9GhNmIiq8EHKj0ZCDC-hC2qr34Tr-peoc: Timeout during connect (likely firewall problem)

My web server is (include version):
nginx version: nginx/1.14.0 (Ubuntu)

The operating system my web server runs on is (include version):
Ubuntu 18.04

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):
Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
certbot 2.8.0

For some reason, I have deleted my certificates. I also uninstalled certbot and deleted all the directories, I then reinstalled certbot and now facing this issue, please help...

2

The website is accessible on: http://www.finance.gkp.pk/ and also on ip: 175.107.63.149/

3

Hi! Your website is unreachable from my vantage point as it isn't from Lets Debug's:

Perhaps there's some kind of geo blocking features enabled somewhere on your side?

4

I concur. From my location the website is accessible, but if you look at e.g. Website Availability Test - Check Website Uptime | Uptimia, you can see it's only accessible from 25 out of 35 locations. Not really geographically different, but perhaps some other block list is being used. Maybe based on provider? I dunno. In any case it's most likely a firewall issue.

5

Don't have any clue where the problem exists, but still unable to get the certificates, please help me identify the problem...thank you

6

This is as far as we can help you I'm afraid. Generic website connectivity issues are not our speciality.

Once your website is accessible by anyone around the globe, you'd fix your certificate issue (at least this one).

You might have luck with one of the other free CAs.