Skip to content

Home Topics Email Authentication Reverse DNS and PTR records

Email Authentication · Reverse DNS and PTR records

Reverse DNS (PTR) records not working? Troubleshooting guide

Short answer

When reverse DNS (PTR) records fails, check in this order: the DNS or platform configuration is published and resolves; the sending system is actually using it; the domain in headers aligns with what you published; and the receiver's verdict in Authentication-Results or bounce messages.

Symptoms#

  • Messages landing in spam despite previously good placement
  • Bounces mentioning policy, authentication, or reputation
  • Provider dashboards showing a drop in reputation or authentication pass rate

Diagnosis steps#

  1. Confirm the configuration is live: query DNS from an external resolver and check the sending platform's settings page.
  2. Send to a seed mailbox and read the full headers, especially Authentication-Results.
  3. Compare the domains in From, Return-Path, and DKIM d= for alignment.
  4. Check provider dashboards (Google Postmaster Tools, Microsoft SNDS) for reputation and error rates.
  5. Review recent changes: new vendors, DNS edits, list imports, volume spikes.

Likely causes#

  • Generic PTRs like 203-0-113-10.provider.net.
  • HELO names that do not match the PTR.

Fix and re-verify#

  1. Ask your hosting or ESP provider to set a PTR for each sending IP.
  2. Use a hostname under your domain (mail1.example.com) rather than the provider's generic name.
  3. Create the matching A record so forward and reverse agree.
  4. Use the same hostname in the SMTP HELO/EHLO banner.

Frequently asked questions#

Can I set PTR records in my own DNS?

No. PTRs live in the IP owner's reverse zone. Your hosting provider or ESP sets them, though some offer self-service.

Analyse your own setup

All analysers
Technical analysis

SPF record analyser

Parse an SPF record, count its DNS lookups, and find what will break it.

Runs in your browser
Technical analysis

DMARC record analyser

Grade a DMARC record on enforcement, not just syntax.

Runs in your browser
Technical analysis

DKIM key analyser

Check a DKIM public key's strength, revocation state, and tags.

Runs in your browser

Keep reading on Reverse DNS and PTR records