Timeout during connect (likely firewall problem)

[CBers]

Hi.

I have been running pfSense (Hyper-VM) alongside nginx (Windows) for a few years now.

I recently un-virtualised pfSense and moved it to it's only hardware.

My LetsEncrypt certificates are due to expire soon, so I thought I'd renew them, but I am getting "Timeout during connect (likely firewall problem)" errors when I run the le64.exe command in my bat file (simple, I know).

It has worked many times previously, but not today.

I updated le64.exe to the latest version (0.38.0.0), but still getting the timeouts.

I assume there is something in pfSense blocking it, but for the life of me I cant figure it out.

Any pointers would be appreciated.

Thanks in advance.

[stephenw10]

Do you seen anything blocked from that client in the firewall logs?

Are you running Snort or Suricata?

I assume that client can otherwise connect out to other sites fine?

Steve

[CBers]

@stephenw10 Everything is working fine, I just cannot renew the certs.

Access to the internet is fine from withing the LAN and remote access to the services behind the nginx rp is fine.

Thanks.

[AndyRH]

Am I correct the LetsEncypt wants to hit a web server (80) to renew the cert?

[CBers]

@andyrh said in Timeout during connect (likely firewall problem):

Am I correct the LetsEncypt wants to hit a web server (80) to renew the cert?

Ah, that might be why, as I have port 80 closed.

[stephenw10]

Mmm, you should see that logged unless you have a specific block rule for port 80 without logging enabled.

Steve

[CBers]

Port 80 was disabled in rules and Nat.

As soon as I enabled them, the certs renewed successfully.

Thanks for pointing me in the right direction, much appreciated.