What I understand about how DNS works is like this: first let's assume mydomain.com
has the IP address 12.34.56.78
. Now when I put the url mydomain.com in the browser, the browser sends a dns lookup to its local dns server, asking, hey, do you know the ip address for mydomain.com. If the local dns server does not know about it, it will ask the parent dns servers, if the parent also does not know, then it keeps asking all the way up until the root dns server. The root dns server will ask some server in charge of the .com
tld. The dns server in charge of the .com
will have knowledge about mydomain.com
because mydomain.com
is the .com
family. Then the answer will be returned back to the initial asker. Also the answer quite likely will be cached in the dns servers involved in the asking process. Would anyone correct my understanding if it is wrong.
So my real question is about how reverse dns lookup works. Let's say if I want to find out what domain name is for the ip 12.34.56.78
. I run the command dig -x 12.34.56.78
. If my local dns server does not know the answer, which server does it further ask? Is it 12.in-addr.arpa.
, or 34.12.in-addr.arpa.
? If this is the case, are these names like 12.in-addr.arpa.
valid domain names? And where should they be deployed so that the reverse lookup requests will know whom to ask?
Reverse DNS works by looking up query DNS servers for a pointer record (PTR). A PTR record maps an IPv4 or IPv6 address to the canonical name for the host. If there is no PTR record on the server, it cannot resolve a reverse lookup. PTR records store reverse DNS entries, with their IP address reversed and .
Forward DNS lookup is using an Internet domain name to find an IP address. Reverse DNS lookup is using an Internet IP address to find a domain name.
Type in an IP address (for example 8.8. 8.8) and press enter and the tool will make a reverse DNS lookup and return the name record for that IP address. Want to see this kind of data for all of your website visitors? Leadfeeder is a reverse DNS tool that can show you every company that is visiting your website.
Reverse DNS (rDNS or RDNS) is a Domain Name Service (DNS) lookup of a domain name from an IP address. A regular DNS request would resolve an IP address given a domain name; hence the name “reverse.” A special PTR-record type is used to store reverse DNS entries.
How a reverse DNS lookup is accomplished:
Source here.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With