# Whitelist hostnames for certbot validation?

**URL:** https://community.letsencrypt.org/t/whitelist-hostnames-for-certbot-validation/115842
**Category:** Help
**Created:** [March 8, 2020, 11:21pm UTC](https://community.letsencrypt.org/t/whitelist-hostnames-for-certbot-validation/115842 "2020-03-08T23:21:24Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![mnordhoff](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mnordhoff/32/22583_2.png) [@mnordhoff](https://community.letsencrypt.org/u/mnordhoff)
#### Post date: [March 8, 2020, 11:34pm UTC](https://community.letsencrypt.org/t/whitelist-hostnames-for-certbot-validation/115842/2 "2020-03-08T23:34:09Z")

</div>

Let’s Encrypt’s policy is that you should allow all IPs to access the validation paths on your website instead of blocking or allowing individual IPs.

The alternative is to use DNS validation (while allowing all IPs to access your DNS servers…).

They recently enabled [multiple perspective validation](https://community.letsencrypt.org/t/acme-v1-v2-validating-challenges-from-multiple-network-vantage-points/112253), which is why you’re seeing requests from new IPs now, but it’s possible for them to change at any time.

---

_[View the full topic](https://community.letsencrypt.org/t/whitelist-hostnames-for-certbot-validation/115842)._