Should a server IP have a PTR record?

Hello

I've read these notes:-  http://hosts-file.net/?s=Help#ipresolve

A. There are several messages that will be shown depending on conditions. These are; 

WARNING: The IP PTR [ PTR ] does not resolve. This is considered very bad practice and contravines the RFC Standards. Most legit ISP's will have their PTR's resolve to an IP. 

This message indicates that an IP addresses PTR (Pointer record) does not itself, resolve to an IP address. This is shown as a warning specifically because a PTR should resolve to an IP address itself, as per the RFC standards. 

WARNING: The IP PTR associated with this record, does not resolve back to it's original IP address. This is very bad practice. 

Original: IP 
PTR IP: PTR 

This message indicates that the IP PTR, resolves to an IP address that is NOT the original IP that actually pointed to this PTR. In laymans terms, an IP address should normally have a corresponding PTR (Pointer record), and this PTR should always resolve back to the original IP address. For example; 

BAD example.com > 1.2.3.4 > ptr.somedomain.com > 0.2.3.4 

GOOD example.com > 1.2.3.4 > ptr.somedomain.com > 1.2.3.4 

WARNING: The PTR associated with this record appears to be deliberately invalid (if no hostname is specified, it should fail resolution). Chances are high that this is a malicious IP. 

This message indicates an IP address is resolving to a PTR record that is not actually a hostname (for example, some malicious IP's have had a pointer record that was simple a "." (period)). If an IP address does NOT have a corresponding PTR that is a hostname, then it should fail resolution. I've never seen any legit ISP's use this behaviour. 

**

THIS website does not appear to have a PTR record 

http://vurldissect.co.uk/?url=3191203      (It takes a long time to load!)

I'd like to know if it is a bona fide website. Please advise.

=

I'm concerned because if one scrolls down at the 'dissect' information page, I see the following - which doesn't seem to have a rightful place there!

Can anyone explain to me why THIS detail appears at line 278? 

=

</td><div style=" width: 31px; height: 87x; 2; id="layer3"><marquee scrollDelay="1044" align="middle" border="0"><a href="http://www.nikeairmaxsite.com/">nike air max sneakers</a><a href="http
://www.toplacoste.com/">Lacoste Outlet</a><a href="http://www.nikedunksales.com/nikesbdunkhigh-c-7.html">nike dunk high</a><a href="http://www.frchristianlouboutin.com/">christian louboutin sale</a><a href="http://www.nikedunksales.com/">nike dunk</a><a href="http://w
ww.nikedunksales.com/nikesbdunkmid-c-13.html">nike dunk mid</a><a href="http://www.frchristianlouboutin.com/christian-louboutin-shoes-c-5.html">christian louboutin shoes</a><a href="http://www.lebronsky.com/kobebryant-c-21.html">kobe bryant shoes</a><a href="http://www.airforce1fashion.com/air-force-1-premium-mid-c-239.html&
quot;>air force one mid</a><a href="http://www.frchristianlouboutin.com/">christian louboutin discount</a><a href="http://www.lebronsky.com/kobebryantnikezoomkobev5-c-21_28.html">kobe v</a></marquee></div>

=

It doesn't seem to be related to the subject matter of the website itself.  Do you think it might in some way be connected with SPAM? 

Thanks in advance for any insightful comment!

September 10th, 2015 5:05am

You received that error by where, email ? If so it seem strange.

You domain name work as intended when you visit the site from an external's computer ?

Free Windows Admin Tool Kit Click here and download it now
September 10th, 2015 10:12pm

Hiya,

PTR records are used for (mail) server verification, in order to avoid spoofing. Basically if external mail servers cannot do a lookup and a reverse lookup that matches, your (mail) domain would be marked as spam.

Besides that, it looks more like a spam mail than actual information.

You can check your public domains for this.

September 11th, 2015 3:39am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics