Centos7 一键安装脚本获取证书失败，求大佬指导。

[logan ma]

PacificRack的vps，域名指向无误。
报错如下（域名用XXX代替）：
Waiting for verification...
Challenge failed for domain XXX
http-01 challenge for XXX
Cleaning up challenges
Some challenges have failed.

IMPORTANT NOTES:

• The following errors were reported by the server:

  Domain: XXX
  Type: connection
  Detail: Fetching
  http://XXX/.well-known/acme-challenge/dRxAwvRFIkkWCC4X7tdUYYxTdA9TT0Xblc0n-mCkORQ:
  Connection refused

  To fix these errors, please make sure that your domain name was
  entered correctly and the DNS A/AAAA record(s) for that domain
  contain(s) the right IP address. Additionally, please check that
  your computer has a publicly routable IP address and that no
  firewalls are preventing the server from communicating with the
  client. If you're using the webroot plugin, you should also verify
  that you are serving files from the webroot path you provided.
  CentOS Linux 7 (Core) 获取证书失败，请到 https://hijk.art 反馈

[hijk]

@logan-ma DNS解析没生效，或者网页后台的防火墙没开

[logan ma]

那应该如何排查呢，大佬，谢谢了。

[hijk]

@logan-ma 看一下网页后台有没有防火墙，没有的话看看DNS是不是设置了多个ip

[logan ma]

@hijk 。pacificRack网页后台看不到有无防火墙。

[hijk]

@logan-ma 是看你域名的DNS解析设置

[logan ma]

@hijk

[hijk]

@logan-ma 那就是还没生效

[logan ma]

@hijk 已经生效了，我用ping 不加www的域名可以响应到第一个ip。

[hijk]

@logan-ma 如果你用第一个ip，脚本里填域名就不能加www