A reverse DNS lookup (rDNS) asks the Domain Name System which domain name, if any, is associated with an IP address. It is the opposite of the usual lookup, which turns a name into an address. The answer comes from a PTR (pointer) record stored in a special reverse namespace. The answer is only a published label. It does not prove who a machine is or that it can be trusted, and it may not exist at all.
Forward vs. reverse DNS
Forward DNS commonly maps a domain name to an IP address. Reverse DNS starts with the address and asks for a name. The two directions are stored separately, and that separation explains most of reverse DNS’s quirks. (Cloudflare: What is reverse DNS?)
As an Amazon Associate I earn from qualifying purchases.
How a reverse lookup works
A DNS client builds a special name from the IP address and asks for a PTR record at that name. A PTR record points to a domain name in the DNS namespace. (RFC 1035)
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →IPv4: in-addr.arpa
Reverse the address octets and append .in-addr.arpa. RFC 1035’s own example queries 10.0.0.6 as 6.0.0.10.IN-ADDR.ARPA. The reversal exists because DNS names get more specific from right to left, while IP addresses get more specific from left to right.
#1 Best Overall
IPv6: ip6.arpa
IPv6 uses the ip6.arpa namespace. The reverse labels are built from the address’s individual hexadecimal digits (nibbles) in its expanded form. It is not a simple reversal of dotted decimal octets. (Cloudflare)
| Aspect | IPv4 | IPv6 |
|---|---|---|
| Reverse namespace | in-addr.arpa |
ip6.arpa |
| How the name is built | Reverse the address octets | Reverse the nibble labels of the expanded address |
| Record returned | PTR | PTR |
Who publishes the PTR record
PTR data lives in the reverse zone. That zone is generally managed by whoever holds authority over the IP address space, or by a provider they delegate to. This is why a website owner usually cannot set a PTR record at their domain registrar. It is set where the IP is allocated, such as a hosting or network provider. Cloudflare’s documentation describes creating reverse zones and PTR records for customers who control IPv4 or IPv6 address space. (Cloudflare: Reverse zones and PTR records)
What reverse DNS is used for
- Logs and troubleshooting: A hostname is easier for a person to read than a bare IP in log files or traceroute output. (Cloudflare; RFC 8501)
- Mail operations: Some receiving mail systems treat reverse DNS as one signal when handling a connection. Practice varies by operator, and not every mail server requires a PTR record.
- Other services: RFC 8501 discusses PTR lookups in service contexts and cautions against reading a PTR’s presence as evidence of trust or administrative competence.
Reverse DNS is not the same as SPF, DKIM or DMARC. SPF (RFC 7208) does define a ptr mechanism, but a reverse lookup alone does not authenticate an email sender.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Limits and caveats
- It may not exist. A lookup can return no PTR answer, because reverse DNS is not universally deployed. A missing record does not by itself indicate malicious activity.
- It can disagree with forward DNS. RFC 1035 says: “Since the IN-ADDR.ARPA special domain and the normal domain for a particular host or gateway will be in different zones, the possibility exists that that the data may be inconsistent.”
- It is not authentication. A PTR is a mapping published by whoever controls the reverse zone. It is a poor standalone basis for trusting SSH connections or other clients.
- Rejecting on a missing PTR is risky. RFC 8501 discusses how negative answers and delays affect users and services, so blanket rejection is not sound advice.
Not the same as an “inverse query”
RFC 1035 section 6.4 describes an optional, obsolete DNS feature called inverse queries. Its author wrote: “Inverse queries are NOT an acceptable method of mapping host addresses to host names; use the IN-ADDR.ARPA domain instead.” Modern reverse DNS is the PTR mechanism, not that feature.
Rank #3
- Used Book in Good Condition
How to check an address
Use any DNS command-line tool or web lookup interface that supports PTR queries. Give it the IP address, or query the constructed reverse name directly for the PTR type. For IPv4 the name ends in .in-addr.arpa. For IPv6 it ends in .ip6.arpa. Exact flags differ between tools, so check your tool’s help. If the result is empty, no PTR is published for that address, and the provider that controls the address space is the party who can add one.
Quick Recap
Rank #4
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
