[quote="jvanasco, post:2, topic:236090"] You should be able to configure your firewall to allow access to banned IP Addresses if you initiate the connection. [/quote] While I am certainly able to do that, I do not consider it security best practices to deliberately connect to networks that are aggressively attacking me. > You could then use a DNS-01 challenge that resolves outside your network I am indeed using DNS challenges, but that introduction of additional external networking services only makes trying to work around abusive traffic a bigger mess. I'm hoping to find a solution that involves fewer mediators between me and LE. 06f04e7cb1d11aa4c098785eb1f6a009d098115521e455d9982b1b21129c6a98