# /usr/bin/certbot renew IP whitelisting
**URL:** https://community.letsencrypt.org/t/usr-bin-certbot-renew-ip-whitelisting/71364
**Category:** Server
**Created:** [September 4, 2018, 11:40pm UTC](https://community.letsencrypt.org/t/usr-bin-certbot-renew-ip-whitelisting/71364 "2018-09-04T23:40:57Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@kaushalshriyan](https://community.letsencrypt.org/u/kaushalshriyan)
#### Post date: [September 4, 2018, 11:40pm UTC](https://community.letsencrypt.org/t/usr-bin-certbot-renew-ip-whitelisting/71364/1 "2018-09-04T23:40:57Z")
Hi,
I have the below cron entry on my remote linux server (CentOS Linux release 7.5.1804 (Core)) with restricted firewall rules.
0 2 1 \* \* /usr/bin/certbot renew --quiet --renew-hook “/usr/bin/gitlab-ctl restart nginx”
when i invoke the above cron entry it fails and looks like firewall restricts the incoming requests from remote letsencrypt validation servers. Do i need to IP whitelist letsencrypt validation servers and if it is the case what IP’s i need to allow?
Any help will be highly appreciable. Thanks in Advance.
Best Regards,
Kaushal
---
### Author:  [@schoen](https://community.letsencrypt.org/u/schoen)
#### Post date: [September 5, 2018, 12:01am UTC](https://community.letsencrypt.org/t/usr-bin-certbot-renew-ip-whitelisting/71364/2 "2018-09-05T00:01:32Z")
Hi @kaushalshriyan,
We've had a large number of threads asking this question, and the answer is that whitelisting the IP addresses is not supported by Let's Encrypt.
> [@IP addresses LE is validating from to build firewall rule](https://community.letsencrypt.org/t/ip-addresses-le-is-validating-from-to-build-firewall-rule/5410):
>
> P…
> [@IP addresses of outbound validators stability over time](https://community.letsencrypt.org/t/ip-addresses-of-outbound-validators-stability-over-time/11731):
>
> W…
> **[FAQ - Let's Encrypt](https://letsencrypt.org/docs/faq/#technical)**
>
> This FAQ is divided into the following sections:
> General Questions Technical Questions General Questions What services does Let’s Encrypt offer? Let’s Encrypt is a global Certificate Authority (CA). We let people and organizations...
If you can't allow inbound connections from arbitrary IP addresses, you're requested to use the DNS-01 validation method instead of HTTP-01.
---
### Author:  [@system](https://community.letsencrypt.org/u/system)
#### Post date: [October 5, 2018, 12:01am UTC](https://community.letsencrypt.org/t/usr-bin-certbot-renew-ip-whitelisting/71364/3 "2018-10-05T00:01:35Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.