I posted about the same issue here before: Dynamic firewall blocks Let's Encrypt renewals - #13 by Scrumplex