How should reverse DNS be configured for shared and dedicated IPs, and how to identify spammy ESP reverse DNS?

Summary

Reverse DNS (rDNS) is a critical element for email authentication, deliverability, and sender reputation. It involves mapping an IP address to a domain name (PTR record), allowing receiving mail servers to verify the sender's legitimacy. For shared IPs, rDNS should identify the ESP, while for dedicated IPs, it should identify either the sender or the ESP. It's crucial to avoid including the IP address directly in the rDNS record. A common indicator of spammy ESPs is an rDNS that doesn't connect to their organization, where the resolved domain doesn't lead to the ESP or sender's website. For self-managed servers, configure rDNS to point to your mail server's IP and ensure it matches your sending domain. Properly configured rDNS improves deliverability, helps in trust building, prevents spoofing, and avoids spam flags. Third-party tools can be used to validate rDNS configuration regularly. Consistent EHLO, HELO, and rDNS domains are essential, particularly for IPv6. Without a proper rDNS setup, ISPs and email providers may assume you are not a legitimate sender, leading to deliverability issues. Amazon SES users should ensure correct rDNS configuration, although it's handled by Microsoft for Exchange Online users.

Key findings

  • rDNS Purpose: Reverse DNS verifies that a mail server is authorized to send emails for a particular domain by mapping an IP to a domain.
  • Shared vs. Dedicated: Shared IPs: rDNS should identify the ESP. Dedicated IPs: rDNS should identify the sender or ESP.
  • Spam Identification: Spammy ESPs often use rDNS records that do not connect back to the ESP or sender.
  • Authentication Component: rDNS is an essential component of email authentication, helping to establish trust and legitimacy in the email ecosystem.
  • Importance: Proper rDNS setup significantly improves email deliverability, trust, and sender reputation.
  • Configuration Responsibility: For self-managed servers, configuring rDNS falls to the server owner. ESPs usually manage rDNS for shared IPs.
  • MX Record: rDNS is also related to MX records and ensures the mail exchanger is correctly identified.

Key considerations

  • Match the Domain: Ensure the rDNS record matches the sending domain to maintain positive sender reputation and improve deliverability.
  • Third-Party Validation: Regularly use third-party tools to validate rDNS configuration to confirm accuracy and proper setup.
  • Consistent Domains: Ensure EHLO, HELO, and reverse DNS domains are consistent, especially when using IPv6 addresses.
  • No IP Addresses: Avoid including direct IP addresses in the rDNS record to prevent being flagged as spam.
  • Hosting Coordination: Coordinate with your ISP or hosting provider to ensure the correct rDNS setup, especially for dedicated IPs.
  • Microsoft handling: For Exchange Online, Microsoft handles rDNS setup; for other platforms, configuration is the user's responsibility.
  • Sender Reputation: Implement and maintain rDNS properly to establish and maintain a positive sender reputation.

What email marketers say
8Marketer opinions

Reverse DNS (rDNS) is a critical component for email deliverability. It involves mapping an IP address back to a domain name, allowing receiving mail servers to verify that the sending server is authorized to send emails for that domain. Proper rDNS configuration builds trust, improves sender reputation, and reduces the likelihood of emails being flagged as spam. For dedicated IPs, the domain owner can often request the ISP or hosting provider to set up the rDNS record to point to their domain. For shared IPs, the ESP typically manages the rDNS. A missing or incorrect rDNS record can increase the spam score and cause emails to be delivered to the junk folder.

Key opinions

  • Verification: Reverse DNS verifies that the IP address is associated with the domain sending the email.
  • Deliverability: Properly configured rDNS improves email deliverability and reduces the chance of being marked as spam.
  • Trust: rDNS helps in establishing trust with receiving mail servers.
  • Configuration: For dedicated IPs, the domain owner can often request the ISP or hosting provider to set up the rDNS record.
  • Management: For shared IPs, the ESP typically manages the rDNS.
  • Spam Score: Missing or incorrect rDNS can increase spam scores and affect inbox placement.

Key considerations

  • Matching Domains: Ensure the rDNS record matches the sending domain to avoid being flagged as spam.
  • Shared vs. Dedicated: Configuration differs between shared and dedicated IPs; understand who manages the rDNS.
  • ISP/ESP Coordination: Coordinate with your ISP or ESP to ensure proper rDNS setup.
  • Reputation Impact: Understand that rDNS impacts sender reputation and overall email deliverability.
  • Proactive Monitoring: Monitor rDNS records to ensure they remain accurate and properly configured.
Marketer view

Email marketer from MXToolbox Forum responds that reverse DNS records are checked by spam filters to verify the sender's legitimacy. A missing or incorrect reverse DNS record can increase the spam score, causing emails to be delivered to the junk folder. They recommends ensuring the reverse DNS record matches the sending domain to avoid being flagged as spam.

April 2023 - MXToolbox Forum
Marketer view

Email marketer from Reddit explains that reverse DNS validates the sender's identity, establishing trust with receiving servers. They answer that it helps prevent spoofing and phishing attacks, ensuring that only authorized senders can use the domain. This contributes to better deliverability and protects the sender's reputation.

January 2024 - Reddit
Marketer view

Email marketer from Mailjet answers that reverse DNS helps improve email deliverability by confirming the identity of the sender's IP address. It contributes to a positive sender reputation and reduces the chances of emails being flagged as spam. They explain it is especially important for dedicated IPs.

July 2022 - Mailjet
Marketer view

Email marketer from Web Hosting Talk discusses the importance of reverse DNS for email servers, emphasizing that a properly configured rDNS record can significantly improve email deliverability. It asserts that many email providers use rDNS as a key factor in determining whether to accept or reject incoming emails.

September 2022 - Web Hosting Talk
Marketer view

Email marketer from SparkPost Blog explains that reverse DNS is important because it verifies that the IP address is associated with the domain sending the email. This helps in establishing trust with receiving mail servers and improving deliverability. It answers that without a proper reverse DNS, emails are more likely to be marked as spam.

June 2023 - SparkPost Blog
Marketer view

Email marketer from SendPulse Blog shares that a reverse DNS record helps confirm that a mail server is authorized to send emails for a particular domain. They answer that it improves deliverability by reducing the likelihood of emails being marked as spam. This is especially important for maintaining a positive sender reputation and ensuring emails reach the inbox.

August 2022 - SendPulse Blog
Marketer view

Email marketer from Validity Blog answers that a reverse DNS record (rDNS) maps an IP address back to a domain name. This helps receiving mail servers verify that the IP address is authorized to send emails for that domain. It establishes sender legitimacy and improves deliverability by preventing emails from being marked as spam.

May 2023 - Validity Blog
Marketer view

Email marketer from ServerFault shares that reverse DNS is configured by the owner of the IP address range, usually the ISP or hosting provider. For dedicated IPs, you can often request they set up the reverse DNS record to point to your domain. For shared IPs, the ESP typically manages the reverse DNS.

October 2021 - ServerFault

What the experts say
8Expert opinions

Reverse DNS (rDNS) is crucial for email authentication and deliverability. For shared IPs, rDNS should identify the ESP, while for dedicated IPs, it should identify the sender or the ESP. It should not contain IP addresses directly. Spammy ESPs often use rDNS that doesn't connect to them; the domain in the rDNS should lead to the sender's or ESP's webpage. Matching EHLO, HELO, and rDNS domains is vital, especially with IPv6. A valid rDNS is essential for building IP reputation and proving legitimacy as a sender. Without proper rDNS, ISPs might assume you're not a legitimate sender, leading to deliverability issues and spam flags.

Key opinions

  • Shared vs. Dedicated IPs: rDNS for shared IPs should identify the ESP; for dedicated IPs, it should identify the sender or ESP.
  • Spammy ESP Identification: Spammy ESPs may use rDNS that doesn't link back to their organization; the rDNS domain should resolve to the sender or ESP's website.
  • Domain Matching: EHLO, HELO, and rDNS domains should match for improved identification, especially with IPv6.
  • IP Reputation: Proper rDNS is vital for building a positive IP reputation and proving legitimacy as a sender.
  • Email Authentication: rDNS is an essential component of email authentication, helping receiving mail servers verify the sender's authorization.

Key considerations

  • Reverse DNS Content: Ensure rDNS doesn't contain direct IP addresses and clearly identifies the responsible party (ESP or sender).
  • ESP Selection: Evaluate ESPs based on their rDNS practices; a transparent and identifiable rDNS is a positive sign.
  • IPv6 Compliance: Maintain consistency across EHLO, HELO, and rDNS domains, especially when using IPv6.
  • Reputation Maintenance: Prioritize proper rDNS configuration to build and maintain a positive IP reputation.
  • SES Considerations: If using Amazon SES, ensure rDNS is correctly configured; if not, alternative configurations may be needed.
Expert view

Expert from Word to the Wise shares that IP reputation is built by proving you are a legitimate sender over a period of time. One of these factors is Reverse DNS. They explain that without it, ISPs will assume you are not a legitimate sender.

November 2022 - Word to the Wise
Expert view

Expert from Spam Resource (Steve Linford) explains that reverse DNS (rDNS) is an essential component of email authentication. It involves setting up a PTR record, which maps an IP address back to a domain name. This helps receiving mail servers verify that the server sending the email is authorized to do so. Without proper rDNS, emails are more likely to be flagged as spam, as it's a crucial factor for establishing trust and legitimacy in the email ecosystem.

November 2024 - Spam Resource
Expert view

Expert from Word to the Wise (Laura Atkins) shares that your EHLO domain, the HELO domain and the reverse DNS should all match. She explains this helps to make your mail more identifiable, especially when using IPv6.

January 2022 - Word to the Wise
Expert view

Expert from Email Geeks explains that it should be easy to identify a responsible party from the reverse DNS and that responsible party should be either the ESP or the sender.

January 2022 - Email Geeks
Expert view

Expert from Email Geeks responds that as long as the reverse DNS points clearly at the ESP it’s not a deal breaker, but he would whine about it a bit, but it wouldn’t be a reason to move ESPs if he were otherwise happy.

September 2021 - Email Geeks
Expert view

Expert from Email Geeks shares that many spammy ESPs use domain names for their reverse DNS that do not connect to the ESP in any way, and explains that if you take the organizational domain from your reverse DNS, and drop it into a web browser it should take you to the senders or ESPs webpage.

December 2023 - Email Geeks
Expert view

Expert from Email Geeks explains that if sending through a shared pool, the reverse DNS should identify the ESP. If sending through a dedicated IP, it should identify the sender or the ESP. It should *not* be things with the IP address in it.

May 2021 - Email Geeks
Expert view

Expert from Email Geeks answers that if you're an Amazon SES customer that's fine regarding reverse DNS. If you’re not, it’s much less so.

May 2022 - Email Geeks

What the documentation says
4Technical articles

Configuring reverse DNS (rDNS) is vital for email deliverability. Microsoft handles rDNS configuration for Exchange Online. However, if you manage your own email servers, you must configure rDNS records to point to your mail server's IP address. The rDNS record should match the domain from which you're sending email, and point to your domain for AWS EC2 instances. For Hetzner servers, rDNS can be configured in their web interface. Properly configured rDNS verifies that your mail server is authorized to send emails from your domain, improving deliverability and preventing emails from being marked as spam.

Key findings

  • Verification: rDNS verifies that your mail server is authorized to send emails from your domain.
  • Domain Match: Your rDNS record should match the domain from which you're sending email.
  • Deliverability Improvement: Properly configured rDNS improves email deliverability and avoids spam flags.
  • AWS EC2 setup: For AWS EC2 instances, set the rDNS record to point to your domain.
  • Hetzner Configuration: Hetzner servers allow rDNS configuration through their Robot web interface.

Key considerations

  • Self-Managed Servers: Ensure you properly configure rDNS if you manage your own email servers.
  • Matching Domains: Confirm your rDNS record matches the sending domain to maintain a positive sender reputation.
  • Cloud Provider Instructions: Follow specific instructions from your cloud provider (AWS, Hetzner, etc.) for rDNS configuration.
  • Dynamic IPs: Consider the implications of dynamic IPs on rDNS configuration and potential deliverability issues.
  • Third-Party Validation: Regularly validate your rDNS configuration using third-party tools to ensure accuracy.
Technical article

Documentation from Microsoft Learn explains that for Exchange Online, Microsoft handles the reverse DNS configuration. Customers using their own email servers need to configure reverse DNS records to point to their mail server's IP address. This helps verify that the mail server is authorized to send emails from your domain.

February 2023 - Microsoft Learn
Technical article

Documentation from Hetzner explains that reverse DNS can be configured in the Hetzner Robot web interface for your servers. You should configure it to point to your domain name. This helps with email deliverability.

December 2023 - Hetzner Docs
Technical article

Documentation from Gmail Help advises that you set up valid reverse DNS records for your sending IP addresses. They explain that your reverse DNS record must match the domain sending mail from.

November 2024 - Gmail Help
Technical article

Documentation from AWS Documentation shares how to set up reverse DNS records for EC2 instances using Elastic IPs. It answers that the reverse DNS record should point to your domain to ensure proper email delivery and avoid being marked as spam.

December 2021 - AWS Documentation