Skip to content
Definition · Reverse DNS

What is rDNS?

Reverse DNS turns an IP address back into a hostname. Mail servers check it to see whether the machine sending them a message is who it claims to be — which is why an IP with no PTR record, or a generic one, is treated with suspicion.

Lookups a receiving server makes

2

IP → hostname, then hostname → IP. Both must agree.

  • PTR record: the IP’s claimed name
  • A record: does that name point back?
  • HELO name matching both
  • You cannot set the PTR yourself

What is rDNS? The definition.

Reverse DNS, or rDNS, maps an IP address back to a hostname — the opposite direction to an ordinary DNS lookup, and it is stored in a record type called PTR. Forward DNS answers “what address does mail.example.com point to?”; reverse DNS answers “what name does 203.0.113.10 claim?”. Mail servers use it as a cheap identity check: they look up the PTR for the connecting address, then look that hostname up again and confirm it resolves back to the same IP. That round trip is called Forward-Confirmed reverse DNS, and passing it is one of the oldest signals that a sending machine is run by somebody taking responsibility for it.

  • rDNS and PTR are the same thing — rDNS is the concept, PTR the record type.
  • Direction: IP address → hostname, the reverse of a normal lookup.
  • FCrDNS: the check that the hostname resolves back to the same IP.
  • Who sets it: the owner of the IP block, which is your hosting provider.
  • One per IP address — not one per sending domain.
  • Needs a dedicated IP to be meaningful at all.

In More Detail

Why it cannot be faked

Your mail server introduces itself with a HELO greeting, and it can say whatever it likes — there is nothing stopping a spam machine claiming to be mail.yourbank.com. The PTR record is different: it lives in the DNS zone belonging to whoever owns the IP address block, so only that party can set it.

So when the greeting and the PTR agree, and the hostname resolves back to the same address, the receiving server learns something real: whoever controls that IP space vouched for the name. It is a weak signal on its own, and it is cheap to check, which is why practically everyone checks it.

Why you have to ask your provider

You control forward DNS for your own domain, so you can create mail.example.com pointing at your server whenever you like. Reverse DNS lives in a different zone — one derived from the IP address and delegated to whoever owns that address block.

That is your hosting provider. This is why every host sets PTR records on request rather than giving you a field in a control panel, and why a provider that will not do it is a genuine blocker for anyone sending mail.

One record per address, not per domain

A PTR record belongs to an IP, so a single server has one reverse hostname no matter how many domains it sends for. People sending for several brands from one machine ask about this constantly, and the answer disappoints them.

The usual approach is to pick one neutral hostname on your own infrastructure domain for the PTR and the HELO greeting, and let SPF, DKIM and DMARC carry the per-domain authentication. If you genuinely need separate reverse names, you need separate IP addresses.

What Is rDNS? — Questions

Port 25 open, dedicated IPv4, rDNS on request.

From $4.95 a month with root access from the first second — plus a 7-day money-back guarantee.