• 19 July 2025
  • Engineering Memo · External Release

Understanding rDNS and EHLO Hostname Alignment in Email Infrastructure

Infrastructure Configuration Principles

The configuration principles that address this operational pattern require understanding both the mechanism and the ISP response system. ISPs do not apply uniform treatment to all senders — they calibrate their response based on behavioral history, volume trends, authentication quality, and complaint signals. Configuration that works for one sender at one volume level may produce different results for another sender at the same volume level, because the underlying reputation history differs.

This means that configuration guidance must always be contextualized: the specific values recommended here are starting points for environments with established IP reputation and clean authentication. New IPs, freshly warmed infrastructure, and environments recovering from reputation events require more conservative starting values with gradual adjustment as reputation signals improve.

The Monitoring Discipline

Effective monitoring for the patterns described in this note requires a discipline that most email operations organizations do not yet have: daily review of ISP-specific metrics with trend awareness. Not weekly review — not "we check when something seems wrong" — but daily review with explicit comparison to the previous day's data and the seven-day rolling average. This level of attention reveals emerging patterns while they are still manageable.

The monitoring investment pays dividends that are difficult to quantify before an incident but obvious after one. Infrastructure teams that maintain this discipline consistently detect reputation events early, respond to them before they become severe, and recover from them faster. The alternative — detecting problems only when they affect aggregate delivery rates — means operating with a multi-week lag between problem onset and detection.

How ISPs Use EHLO Hostname and PTR Together

When PowerMTA connects to a receiving MTA, it presents a hostname in the EHLO command — typically the hostname configured in smtp-source-host. The receiving MTA then performs a reverse DNS lookup on the connecting IP to verify the PTR record. If the EHLO hostname matches the PTR hostname, and the PTR hostname resolves back to the same IP (forward confirmation), the connection scores positively on identity signals.

Common Misconfiguration Patterns

Three patterns cause rDNS/EHLO misalignment: (1) The PTR record points to a generic datacenter hostname rather than your mail infrastructure hostname. (2) The EHLO hostname in PowerMTA smtp-source-host doesn't match the PTR record. (3) Multiple IPs sharing the same EHLO hostname without matching PTR records for each IP.

Microsoft's Outlook infrastructure is the most sensitive to this alignment. An IP with no PTR record, or a PTR that doesn't match the EHLO, receives notably lower connection acceptance rates at Outlook even when all other authentication factors (SPF, DKIM, DMARC) are passing.

Monitoring and Recovery Principles

Monitor deferral rate trends by ISP hourly from the PowerMTA accounting log — trends reveal emerging problems before they become delivery incidents. A deferral rate rising from 3% to 7% over four weeks is more significant than a stable 7%, even though the absolute value appears moderate. Trend analysis requires maintaining historical data: configure accounting log retention for at least 30 days.

When the patterns described in this note require remediation: reduce volume at the affected ISP first, correct configuration second, resume volume gradually third. Configuration fixes applied at full volume before reputation systems register the improvement produce incomplete recovery. Patience during the recovery phase — typically 2-4 weeks of clean operation — is as important as the technical fix itself.

Further Infrastructure Reading

The operational note series at Cloud Server for Email covers the full range of email infrastructure management topics — from PowerMTA configuration specifics to high-level infrastructure architecture principles. The notes are published monthly and reflect current production observations rather than theoretical frameworks. Topics are sequenced from foundational (authentication architecture, IP pool design) to advanced (multi-datacenter failover, high-frequency transactional SLA design).

For operators building or managing dedicated email sending infrastructure, the PowerMTA technical reference series provides configuration depth that complements these operational notes. The MailWizz technical reference covers campaign management platform configuration. Together, these resources provide the reference material needed to operate a production PowerMTA + MailWizz environment to the standard required by high-volume sending at major ISPs in 2026.

Questions about specific infrastructure configurations, or about how the principles in this note apply to a particular environment, can be addressed through a technical assessment. Reach the Cloud Server for Email infrastructure team at infrastructure@cloudserverforemail.com or +372 602-7190.