Cloudflare Error 1002: DNS points to Prohibited IP / Restricted
A record points to a private, reserved or Cloudflare IP that Cloudflare won’t proxy to.
Seen on:
Cloudflare
Meaning
Private ranges (10.x, 192.168.x, 127.0.0.1) can’t be origins for proxied records. “Restricted” variants appear when a domain is blocked.
Common causes
- Proxied A record with a private/loopback IP
- Cloudflare IP used as origin
- Domain restricted
⚡ Quick fix
- Use the server’s public IP
- Use Cloudflare Tunnel for private servers
- Turn off proxy (grey cloud) for internal-only records
Detailed fix by platform
Shell
- bash
cloudflared tunnel create app cloudflared tunnel route dns app app.example.com
How to diagnose
- IP — Private or public?
- Proxy — Orange cloud on the record?
🔧 Still not fixed?
Many errors look alike. If the steps above didn’t solve it, one of these is probably what you’re facing:
Similar errors
Most viewed in Cloudflare
Other ways to find it
🧠 Still stuck? Analyze your error
Paste the full message, response headers or stack trace — we'll detect the platform and point to the most likely cause.
Was this page helpful?
Report a correction or suggest an improvement
Last updated 7 Oct 2026