获取证书失败

[lostzzz]

之前用vultr的服务器，使用站内的一键伪装脚本配置v2ray一切正常，可以上外网，只是速度太慢，于是购买了站内推荐的cubecloud魔方云新加坡服务器准备试一试，结果一键伪装脚本安装到最后时出现获取证书失败问题（以下我的域名用xxx取代），前提我的域名已经正常解析到了服务器ip
http-01 challenge for xxx
Waiting for verification...
Challenge failed for domain xxx
http-01 challenge for xxx
Cleaning up challenges
Some challenges have failed.

IMPORTANT NOTES:

• The following errors were reported by the server:

  Domain: xxx
  Type: connection
  Detail: Fetching
  http://xxx/.well-known/acme-challenge/FUgG_J9bL_SWcKLnsuXtdlVXG3pRXKH1gyoR9W-GE1A:
  Error getting validation data

  To fix these errors, please make sure that your domain name was
  entered correctly and the DNS A/AAAA record(s) for that domain
  contain(s) the right IP address. Additionally, please check that
  your computer has a publicly routable IP address and that no
  firewalls are preventing the server from communicating with the
  client. If you're using the webroot plugin, you should also verify
  that you are serving files from the webroot path you provided.

• Your account credentials have been saved in your Certbot
  configuration directory at /etc/letsencrypt. You should make a
  secure backup of this folder now. This configuration directory will
  also contain certificates and private keys obtained by Certbot so
  making regular backups of this folder is ideal.
  获取证书失败，请到 https://www.hijk.pw 反馈

后续试了不带伪装的脚本，能安装成功但是也无法上外网
试了试trojan一键脚本，在获取证书时出现和v2ray一模一样的问题，求助！

[匿名者]

字面意思看有可能是DNS的问题，不妨检查一下或者重新加一个类似www2之类的新解析试试。还提到了可能跟防火墙有关，建议检查443等接口（如果没有修改的话）是否放行，尤其是部分服务提供商还有上级防火墙，就在服务提供商的面板里，那个也需要放行。具体请等待@hijk 解答

[hijk]

看起来是防火墙没有开

[hijk]

@lostzzz 看了一下，是你的vps服务商没有用firewalld，而是用iptables，导致获取失败。

我已经帮你把环境弄好，你登录进去执行命令安装就可以了

[lostzzz]

经大神指导，问题已解决，先运行service iptables stop，然后再运行一键脚本，后来的同学碰到一样问题的可以参考一下