What ip address do i need to put in geoblock

[griffin]

Welcome to the Let's Encrypt Community, @njohnson01!

You could put a higher exception in your firewall rules that allows all traffic only to the acme-challenge path for HTTP-01 challenges. Not like you face much, if any, risk from that.

@petercooperjr

For the HTTP-01 challenge (used most commonly): Worldwide access to port 80 (unencrypted http) for requests to the /.well-known/acme-challenge/ path