I am getting the below error to a site that has been working for months, nothing has changed. The site A record is pointed to sportsengine and the IP appear correct and is not in the Cloudflare list of internal IPs.
Error 1000
Ray ID: 6dae1f81bb36e744 • 2022-02-09 15:27:39 UTC
DNS points to prohibited IP
What happened?
You’ve requested a page on a website (www.i90hockeyleague.com) that is on the Cloudflare network. Unfortunately, it is resolving to an IP address that is creating a conflict within Cloudflare’s system.
What can I do?
If you are the owner of this website:
you should login to Cloudflare and change the DNS A records for www.i90hockeyleague.com to resolve to a different IP address.
To clarify for future readers, this is not the case. You need at least one A or AAAA or CNAME, not one of each.
@cweinholtz I presume your case must be one of these then.
Your Cloudflare DNS A or CNAME record references another reverse proxy (such as an nginx web server that uses the proxy_pass function) that then proxies the request to Cloudflare a second time.
The request X-Forwarded-For header is longer than 100 characters.
The request includes two X-Forwarded-For headers.
A Server Name Indication (SNI) issue or mismatch at the origin.
Has the provider changed anything recently, do you know? It’s a bit of an odd one but something must have caused it. I don’t think it’s the usual reason but there must be something wrong.
www.i90hockeyleague.com seems to be a CNAME to i90hockeyleague.sportngin.com and not sites.sportngin.com. That actually resolves to 104.16.223.243 and 104.16.222.243 which are Cloudflare IPs. The root domain redirects to that.