Error 1000: DNS points to prohibited IP
Your DNS record points at a Cloudflare IP
Seen in Cloudflare
A proxied DNS record leads back to Cloudflare's own network instead of to your origin server.
Common causes
- An A record in Cloudflare DNS contains a Cloudflare IP address.
- The origin sits behind another proxy that sends the request back through Cloudflare.
How to fix it
- Replace the Cloudflare IP in the A record with your origin server's real IP.
- Make sure any reverse proxy in front of the origin connects to the origin directly, not through the site's public hostname.
Got a different message? Paste it into the error explainer.
Related errors
- 502 Bad Gateway · The proxy got a bad response from the server behind it
- 503 Service Unavailable · The server is temporarily unable to handle requests
- 504 Gateway Timeout · The server behind the proxy took too long
- Error 520: Web server is returning an unknown error · Cloudflare got an empty or invalid response
- Error 521: Web server is down · Cloudflare could not connect to your origin
- Error 522: Connection timed out · Cloudflare timed out connecting to your origin
- Error 525: SSL handshake failed · Cloudflare could not complete TLS with your origin
- Error 526: Invalid SSL certificate · Cloudflare doesn't trust your origin's certificate
- 429 Too Many Requests · You've hit a rate limit
- 400 Bad Request · The server could not understand the request
- 401 Unauthorized · The request needs valid credentials
- 403 Forbidden · The server refuses to allow this request