What’s a PTR record (reverse DNS) and why is it important?

Still have a question, spotted an error, or have a better explanation or a source we should cite?

When your mail server sends an email, the receiving server does a quick background check. It takes your sending IP address and asks, "Does this IP actually belong to who they claim to be?" That lookup is called a reverse DNS lookup, and the record it finds is your PTR record.

A PTR record (short for Pointer record) is the opposite of a regular DNS lookup. Normal DNS goes from a domain name to an IP address. Reverse DNS goes the other way, from an IP address back to a hostname. So if your sending IP is 203.0.113.10, your PTR record might point that IP back to mail.tidalcurrent.io.

Here's why that matters for email. Spam is often sent from compromised machines or residential connections that have no PTR record at all, or a generic one auto-assigned by an internet provider (something like 203-0-113-10.dynamic.isp.com). Receiving servers have learned to treat those as red flags. A properly configured PTR record is one of the first signals a receiving mail server uses to decide whether your email deserves a closer look or an outright rejection.

There are three scenarios you'll run into:

  • No PTR record. Many receiving servers will reject your email before it even gets evaluated for content. This is a hard blocker for a lot of infrastructure.
  • Generic PTR record. Something like mail.192-0-2-1.isp.com suggests a residential or dynamic IP, which looks like a compromised machine. It won't necessarily cause an outright rejection, but it will hurt your trust score.
  • Branded PTR record. Something like mail.yourdomain.com or outbound1.yourdomain.com signals that a real organization owns and maintains this sending IP. That's what you want.

The gold standard goes one step further. It's called forward-confirmed reverse DNS (FCrDNS), where your PTR record points to a hostname and that hostname resolves back to the same IP. That two-way check is a strong trust signal because it's harder to fake. Your PTR says the IP belongs to mail.tidalcurrent.io, and when a receiving server looks up mail.tidalcurrent.io, it gets back that same IP. Everything lines up.

Getting your PTR record set up right usually means contacting whoever controls your sending IP, your hosting provider, your cloud provider, or your ESP if they've assigned you a dedicated IP. You can't set a PTR record through your domain registrar the way you would an MX or SPF record. The IP owner controls it.

If you're not sure what your current PTR record looks like, you can check it with our free Email Header Analyzer, or run a quick dig -x [your IP] in a terminal. Worth checking before you assume everything is fine.

Contributors

Who worked on this answer

Every name links to their profile. Every company links to their site. Real people, real accountability.

Ask an AI · tailored to your setup

Check my PTR record setup

My sending IP is your IP address and my current PTR record shows current PTR hostname. I send email from your domain using your hosting/ESP/IP provider. Based on what I've read about PTR records and reverse DNS, can you tell me whether my current setup looks legitimate, what a properly branded PTR record should look like for my domain, and what steps I should take to update it with my provider?

Edit the yellow boxes, then send to the AI of your choice.