PTR Record (Pointer Record) (PTR Record)

Security Glossary - DNS

Definition: A PTR record provides reverse DNS lookup, mapping an IP address back to a domain name. It is the opposite of an A record. PTR records are stored in the in-addr.arpa (IPv4) or ip6.arpa (IPv6) zones and are managed by the IP address owner, typically the hosting provider or ISP.

Why PTR Record Matters

PTR records are critical for email deliverability. Most mail servers perform a reverse DNS lookup on incoming connections and reject or flag email from servers without a valid PTR record. If your mail server's IP address does not have a PTR record matching your domain, your emails are more likely to be marked as spam.

The PTR record should match the A record in a forward-confirmed reverse DNS (FCrDNS) setup. This means the PTR for IP 1.2.3.4 should return mail.example.com, and the A record for mail.example.com should return 1.2.3.4. Mail servers check for this bidirectional match as an anti-spam measure.

Unlike most DNS records that you manage in your domain's zone, PTR records must be set by whoever controls the IP address block. For cloud hosting, this usually means configuring reverse DNS through your provider's control panel (AWS, DigitalOcean, etc.). For dedicated servers, the hosting provider sets it upon request.

Checking Your Setup

A DNS health checker verifies that your mail server's IP address has a valid PTR record and that it matches the forward DNS (FCrDNS check). If PTR is missing or mismatched, contact your hosting provider to configure reverse DNS for your server's IP.

Frequently Asked Questions

Who manages PTR records?
PTR records are managed by the owner of the IP address block, which is usually your hosting provider or ISP - not your domain registrar or DNS provider. You typically configure reverse DNS through your hosting provider's control panel.
Do I need a PTR record for my web server?
For a web server that does not send email, PTR records are not strictly required. However, they are essential for mail servers. If your web server and mail server share an IP address, configure the PTR to match your mail domain.
Disclaimer: DomainOptic provides automated informational scans only. Results do not constitute professional security advice, compliance certification, or a guarantee of security. Always verify findings independently.