X-Git-Url: https://git.sthu.org/?p=shutils.git;a=blobdiff_plain;f=letsencrypt%2Frenewal.sh;fp=letsencrypt%2Frenewal.sh;h=763789d72b312aaf5e1ef5a27aa088b26f0259d0;hp=b21d4c8d22f84e6ec90db17ca813dfebab18459e;hb=e9ca613da889135e668f419e7b8f3b0aaa265dfb;hpb=bfae31ae23e85349d9c8decafbdcec41c24964a7

diff --git a/letsencrypt/renewal.sh b/letsencrypt/renewal.sh
index b21d4c8..763789d 100644
--- a/letsencrypt/renewal.sh
+++ b/letsencrypt/renewal.sh
@@ -13,8 +13,8 @@ PORT80=$(lsof -ti :80 | wc -l)
 if [ $PORT80 = 0 ]; then
   cd /var/www/challenges
   nohup python3 -m http.server 80 > /dev/null 2>&1 &
-  /usr/sbin/iptables -A INPUT -p tcp --dport 80 -m conntrack --ctstate NEW -j ACCEPT
-  /usr/sbin/ip6tables -A INPUT -p tcp --dport 80 -m conntrack --ctstate NEW -j ACCEPT
+  #/usr/sbin/iptables -A INPUT -p tcp --dport 80 -m conntrack --ctstate NEW -j ACCEPT
+  #/usr/sbin/ip6tables -A INPUT -p tcp --dport 80 -m conntrack --ctstate NEW -j ACCEPT
 fi
 
 
@@ -64,7 +64,7 @@ fi
 
 # Stop temp web server and close port 80 if needed.
 if [ $PORT80 = 0 ]; then
-  /usr/sbin/iptables -D INPUT -p tcp --dport 80 -m conntrack --ctstate NEW -j ACCEPT
-  /usr/sbin/ip6tables -D INPUT -p tcp --dport 80 -m conntrack --ctstate NEW -j ACCEPT
+  #/usr/sbin/iptables -D INPUT -p tcp --dport 80 -m conntrack --ctstate NEW -j ACCEPT
+  #/usr/sbin/ip6tables -D INPUT -p tcp --dport 80 -m conntrack --ctstate NEW -j ACCEPT
   pkill -f http.server
 fi