Reverse DNS Setup for an IP with multiple domains

Martin asked:

I am trying to clarify my Reverse DNS PTR lookup for a domain. I have a server with a single IP addresses and multiple accounts, all sharing that IP address;

My PTR is currently: 14400 IN PTR

But the domain that the IP address reverses to is, therefore should the PTR record on the account reference the primary returned domain rather than the account domain?

I can’t seem to find any clear guidance on this with Google searching, however this question did seem to suggest that the account should reference the server domain rather than the account specific domain.

So, would having : 14400 IN PTR

in the DNS for the account give it a valid PTR record, even though this doesn’t mention the account domain at all?

Edit: To clarify, the is the primary name server for the domain.


I have a persistent issue with this topic, and felt it best to resurrect this incompleted query than to start a new one from scratch.

All the above still holds true.

I have a server with various domains, on an IP address .xx.xx.xx.236 and xx.xx.xx.238 . I also have a single domain on its own IP address just for that doman (for the TLS certificate), which is xx.xx.xx.241 but I can’t get that domain to correctly show a vaid PTR record in the DNS.

A domain on the server that works (ip address ):       14400 IN  A  14400 IN PTR

the above works and gives a valid PTR feedback.

The is the same primary name server as the domain which sits on its own IP address ( but which never gives a correct PTR record.

The domain that does not give out a valid PTR record (unique IP address):    14400 IN  A  14400 IN PTR

What Am I missing to make this record have a valid PTR DNS record?

My answer:

Mail servers will cross-check your SMTP server’s advertised HELO hostname against the PTR record for the connecting IP address, and then check that the returned name has an address record matching the connecting IP address. If any of these checks fail, then your outgoing mail may be rejected or marked as spam.

So, you need to set all three consistently: The server’s hostname and the name in the PTR record must match, and that name must resolve to the same IP address.

Note that these do not have to be the same as the domain names for which you are sending mail, and it’s common that they are not.

View the full question and any other answers on Server Fault.

Creative Commons License
This work is licensed under a Creative Commons Attribution-ShareAlike 3.0 Unported License.