Cloudflare Error 1002: DNS points to Prohibited IP / Restricted

A record points to a private, reserved or Cloudflare IP that Cloudflare won’t proxy to.

Seen on: Cloudflare

Meaning

Private ranges (10.x, 192.168.x, 127.0.0.1) can’t be origins for proxied records. “Restricted” variants appear when a domain is blocked.

Common causes

  • Proxied A record with a private/loopback IP
  • Cloudflare IP used as origin
  • Domain restricted

⚡ Quick fix

  1. Use the server’s public IP
  2. Use Cloudflare Tunnel for private servers
  3. Turn off proxy (grey cloud) for internal-only records

Detailed fix by platform

Shell

  1. bash
    cloudflared tunnel create app
    cloudflared tunnel route dns app app.example.com

How to diagnose

  1. IP — Private or public?
  2. Proxy — Orange cloud on the record?

🔧 Still not fixed?

Many errors look alike. If the steps above didn’t solve it, one of these is probably what you’re facing:

🧠 Still stuck? Analyze your error

Paste the full message, response headers or stack trace — we'll detect the platform and point to the most likely cause.