Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I manage a few DNS servers (Bind9, Windows Server 2008 R2) that are used internally. I have always taken the time to make sure that the correct corresponding PTR records were configured for Reverse DNS Lookups, because it 1) seemed more complete to me and 2) I'm under the impression it is "best practice" to do so.

Other than for email services are there any other services that require having Reverse DNS Lookups available? What services are they?

share|improve this question
up vote 3 down vote accepted

PTR records are for reverse DNS and were originally designed for troubleshooting purposes.

Back in the good ol' days, normally there was a 1:1 mapping between a hostname and an IP address. With the invention of HTTP/1.1 and Host headers, virtual hosting support in mail servers, web servers etc. this is normally not as black and white.

However, being able to do a simple "host" on your IP address of choice and know what the hostname of that device is and subsequently derive what function it carriers out within your network is important. Especially for network related services (routers, mail servers, DNS servers etc.)

The main original reason for this is troubleshooting, it became used in the fight against spam as spammers tended to use poorly configured networks or home machines without reverse DNS records.

Lack of PTR records generally signifies a poorly configured network. Add in PTR records, as there are pieces of software that sometimes assume they exist and they simply make your life easier.

share|improve this answer

Cfengine is one example of a service with requires proper A, PTR and hostname set. It checks the 3 of them to make sure hosts are who they pretend to be.

share|improve this answer

Nearly anything that is logging connections or making access control decisions based on DNS has an option to do a reverse DNS lookup - Webservers, FTP and SSH daemons being the most commonly used examples. It is not as much of a requirement in the default configuration, but it can be made one by the administrator.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.