# Admin tip: set rDNS / PTR on a crypto VPS | NulNet > A PTR that matches the HELO is the first ticket most mail setups need. What to send the desk, how to align SPF and DKIM, and how fast it lands. No ID at. Source: https://nulnet.com/guides/admin-tips-rdns-ptr/ [Home](https://nulnet.com/) / [Guides](https://nulnet.com/guides/) / Admin tip: set rDNS / PTR on a crypto VPS Admin tips # Admin tip: set rDNS / PTR on a crypto VPS ![NulNet panel abstract: ticket card linked to a rack](https://nulnet.com/img/theme-support.png) A PTR that matches the HELO is the first ticket most mail setups need. What to send the desk, how to align SPF and DKIM, and how fast it lands. Published 2026-08-30 · Updated 2026-09-08 · NulNet Editorial **Short answer** Send the IP, the FQDN already on an A/AAAA record, and the invoice code; the desk edits the PTR. You align HELO, SPF and DKIM on the box. NulNet: VPS from $3/mo and dedicated from $30.80/mo annual. The map spans twenty-one locations — Reykjavik (Iceland) and Zurich (Switzerland) among them, plus Singapore, Dubai, Cape Town and fourteen others. Signup is email plus a 12-character password, or token-only. No KYC. Checkout is crypto-only across BTC, XMR, ETH, BNB, SOL, LTC, TRX, XRP, DOGE, DASH, ADA, GRAM (TON), and USDT (TRC-20/ERC-20/BEP-20/SPL). No payload or guest traffic logs; connection metadata ≤24h. DDoS included. One SKN company, one crypto checkout. Deploy at https://nulnet.com/deploy/. ## Why PTR shows up in tickets Receiving mail servers and a handful of payment APIs check reverse DNS before they read a word of your message: a generic allocator name as PTR is the classic spam signature, and [Postfix documentation](https://www.postfix.org/documentation.html) cannot compensate for it. It is the usual first ticket after a mail VPS order — nothing is broken; reputation plumbing starts here. Port 25 is open by policy on every plan, so the record is the missing piece. VPS from $3* (fund $50+), storage 1–5 TB NVMe from $24/mo annual-eff, dedicated with IPMI from $30.80/mo. Crypto invoice, no KYC. [Launch now](https://nulnet.com/deploy/?kind=vps&plan=business/) ## What to send - The IPv4 (and the IPv6, if you published its AAAA record). - The FQDN that already points back at that address via A/AAAA. - The invoice code, if the panel session is new. The desk sets the pointer; forward and reverse then agree, which is the property receivers actually test. While the ticket is open, harden [OpenSSH manual](https://www.openssh.com/manual.html) — key-only login is the same afternoon's work — and keep port 25 for mail you operate yourself. ## Matching HELO, SPF and DKIM The PTR is one of four strings that must tell the same story: reverse DNS, the SMTP HELO name, the SPF record and the DKIM selector on the sending domain. Receivers score the agreement before the prose, so set the pointer first and introduce the MTA with the same FQDN. A mismatch anywhere in that chain costs deliverability no matter how clean the address history is. ## Warm-up and reputation A fresh IPv4 has no reputation anywhere, and no provider can sell a shortcut around that physics. Start with low volume toward recipients who open your mail, hold bounce rates under a few percent, and let weeks rather than days set the ramp. Big receivers score domain and IP separately: a domain's reputation follows it onto a new address, and a clean domain digs out of a shared history faster than the reverse. ## When one address is not enough Splitting roles — web, VPN egress, mail — across addresses keeps one job's reputation from taxing another's. Extra IPv4s are a $3.50/mo add-on, each with its own settable pointer — the cheap fix long before dedicated metal. When the workload outgrows slices entirely, the [dedicated tiers](https://nulnet.com/dedicated/) carry IPMI and ECC from $30.80 annual-eff with the same PTR workflow; bulk archives belong on [storage](https://nulnet.com/storage/), from $24. IPv6 PTR too? Yes, for any address whose AAAA is published — include the IPv6 in the ticket alongside the IPv4. Receivers check both families, and an unpaired AAAA is its own deliverability penalty. How fast does the change land? Same support queue as every other ticket, with DNS propagation on top — usually quick, occasionally cached longer by resolvers you do not control. It is a desk action, not a self-serve panel field. Does a web server need PTR? Rarely. Browsers and search crawlers do not score reverse DNS; the record matters to mail receivers, some FTP mirrors and a few API gateways. Set it once anyway — it costs a ticket and removes a variable. Can the PTR change again later? Yes — re-ticket the IP with the new FQDN whenever the hostname moves. Update HELO and SPF to match in the same change, since the agreement between them is what receivers verify, not the string itself. Does rDNS alone fix deliverability? No — it removes one known penalty, not all of them. Content, volume ramp, list hygiene and authenticated headers (SPF, DKIM, DMARC) carry the rest, and a warmed address stays clean only if the mail stays wanted. ## Primary sources - [OpenSSH manual](https://www.openssh.com/manual.html) - [Postfix documentation](https://www.postfix.org/documentation.html) ## Related guides - [Minimum-data no-KYC checkout](https://nulnet.com/guides/anonymous-vps-crypto-no-kyc/) - [Buy a VPS with crypto](https://nulnet.com/buy-vps-with-crypto/) - [No-KYC VPS: requirements and limits](https://nulnet.com/no-kyc-vps/) - [Pay with Monero](https://nulnet.com/monero-vps/) - [Offshore VPS](https://nulnet.com/offshore-vps/) - [VPS vs dedicated bare-metal](https://nulnet.com/guides/vps-vs-dedicated/) - [Best no-KYC VPS 2026](https://nulnet.com/best-no-kyc-vps-2026/) - [FAQ: crypto VPS](https://nulnet.com/guides/faq-crypto-vps/) ## Checkout facts - **Price** VPS from $3/mo. Dedicated from $30.80/mo. - **Identity** No KYC. Token-only (no email) or email plus a 12-character password. No passport, phone, or card. - **Payment** Sixteen ways to settle, none of them a card: XMR and BTC lead, ETH, SOL, LTC, BNB and TRX follow, then XRP, DOGE, DASH and ADA, GRAM (TON) for Telegram-adjacent rails, and USDT on four networks — TRC-20, ERC-20, BEP-20, SPL. Live-rate invoice. - **Logs** No payload / no guest traffic logs. Billing and panel actions retained. Connection metadata ≤24h. - **Platform** KVM on ECC and local NVMe. DDoS filtering included. Facilities in 21 cities across four continents — the locations table lists each one's tier, uplink and governing law. Need Iceland or Switzerland plus no KYC? Those two carry a published premium (+20% / +35%); every other flag stays at base list. Pay BTC, USDT, XMR, BNB, XRP, GRAM (TON) or 10 more. Open deploy to pick a plan. ## Ready to launch? Build the box — VPS, storage or bare metal — create the password, pay the invoice that follows. [Launch now](https://nulnet.com/deploy/?kind=vps&plan=business/)[Dedicated](https://nulnet.com/dedicated/)