Cloudflare Error 1002: DNS points to Prohibited IP / Restricted
A record points to a private, reserved or Cloudflare IP that Cloudflare won’t proxy to.
Exact message you may see
DNS points to Prohibited IP
Seen on:
Cloudflare
Meaning
Private ranges (10.x, 192.168.x, 127.0.0.1) can’t be origins for proxied records. “Restricted” variants appear when a domain is blocked.
Common causes
- Proxied A record with a private/loopback IP
- Cloudflare IP used as origin
- Domain restricted
⚡ Quick fix
- Use the server’s public IP
- Use Cloudflare Tunnel for private servers
- Turn off proxy (grey cloud) for internal-only records
Detailed fix by platform
Shell
- bash
cloudflared tunnel create app cloudflared tunnel route dns app app.example.com
How to diagnose
- IP — Private or public?
- Proxy — Orange cloud on the record?
🔧 Still not fixed?
Many errors look alike. If the steps above didn’t solve it, one of these is probably what you’re facing:
Similar errors
Most viewed in Cloudflare
Other ways to find it
Where this error sits
Origin: Edge & web server. Errors that are often confused with or caused by this one (click to open):
🧠 Still stuck? Analyze your error
Paste the full message, response headers or stack trace — we'll detect the platform and point to the most likely cause.
💬 What worked for others
No tips yet — did something else fix this for you?
Share what worked for you
Tips are checked by an editor before they appear. Links are removed.
Did this fix work for you?
Report a correction or suggest an improvement
Last updated 13 Oct 2026