What is reverse DNS and a PTR record?
Reverse DNS, or rDNS, resolves an IP address back to a hostname. It is the mirror image of the forward lookup you use every day, where a name like example.com resolves to an IP address. The reverse direction answers a different question: given the address 192.0.2.25, what hostname does the owner of that address say belongs to it? The answer lives in a single DNS record called a PTR, short for pointer record.
PTR records do not live in your normal domain zone. They live in a special reverse zone under in-addr.arpa that is controlled by whoever holds the IP address block, usually your host or ISP. For IPv4 the address is reversed octet by octet and the suffix is appended, so 192.0.2.25 becomes 25.2.0.192.in-addr.arpa. That is the name a receiving server queries when it wants to know who is really behind a connecting IP.
Why mail servers require reverse DNS
Reverse DNS is one of the first trust signals a receiving mail server reads. The moment your server opens an SMTP connection, the receiver looks up the PTR record for your IP. If no record comes back, or if the hostname looks like a throwaway ISP string, the message starts the conversation at a disadvantage before SPF, DKIM, or DMARC are even evaluated. Many providers reject or heavily downgrade mail from IPs with no valid reverse DNS, and the largest mailbox providers list it among their baseline sender requirements.
RFC 1912 has recommended a matching PTR record for every mail-sending host for decades, and RFC 5321 expects the name a server announces in its HELO or EHLO greeting to be a real, resolvable hostname. Reverse DNS ties those expectations to the IP itself, which is far harder to forge than a header. A clean PTR record tells the receiver that a responsible owner stands behind the address.
Forward-confirmed reverse DNS (FCrDNS)
A PTR record on its own is only half the picture. The stronger signal that receivers actually trust is forward-confirmed reverse DNS, often shortened to FCrDNS. It requires both directions to agree:
- The IP has a PTR record that resolves to a hostname, for example
mail.yourdomain.com. - That hostname has an A record that resolves back to the very same IP address.
When both checks line up, the IP and the hostname vouch for each other, and that round trip is what receiving servers grade. This tool runs both lookups for you and tells you plainly whether the address is forward-confirmed or whether one side of the loop is broken.
How to set up a PTR record
Because the reverse zone belongs to the IP owner, you cannot create a PTR record in your own domain registrar. The setup is a short, deliberate process:
- Decide on a hostname. Pick a name on a domain you control, such as
mail.yourdomain.com, and create an A record for it that points to your sending IP. - Ask the IP owner to add the PTR. Contact your host, ISP, or cloud provider and request a PTR record mapping the IP to that hostname. Cloud platforms usually expose this in a control panel; smaller hosts handle it by support request.
- Confirm both directions. Once the change propagates, re-run this checker to verify the PTR resolves to your hostname and the hostname resolves back to the IP, completing forward confirmation.
Generic versus branded PTR hostnames
Not every PTR record helps you equally. Many IPs ship with a generic default name that bakes the address into the hostname, such as 192-0-2-25.static.example-isp.net. That string is technically valid, but it signals a shared or unconfigured address and can weigh on deliverability. A branded hostname that matches your sending domain, like mail.yourdomain.com, reads as a deliberate, owned mail server and aligns neatly with the name your server announces at HELO time. If your reverse DNS is generic, ask whoever controls the IP to set a branded hostname instead.
Reverse DNS is only one layer of sender trust. Pair a clean PTR record with a strong sender reputation, confirm your IP is not on any blacklist, and check that your MX records point where you expect.