reverse dns consistency audit derived

{
  "input": {
    "body": {
      "hosts": [
        {
          "ptr": "mx1.example.test",
          "helo": "mx1.example.test",
          "address": "203.0.113.10",
          "forward_addresses": [
            "203.0.113.10"
          ]
        },
        {
          "ptr": "mx2.example.test",
          "helo": "mx2.example.test",
          "address": "203.0.113.11",
          "forward_addresses": [
            "203.0.113.99"
          ]
        },
        {
          "ptr": "198-51-100-7.static.hosting-vendor.test",
          "helo": "mail.example.test",
          "address": "198.51.100.7",
          "forward_addresses": [
            "198.51.100.7"
          ]
        },
        {
          "address": "192.0.2.44"
        }
      ],
      "expected_domain": "example.test"
    },
    "type": "http",
    "method": "POST",
    "bodyType": "json"
  },
  "output": {
    "type": "json",
    "example": {
      "hosts": [
        {
          "ptr": "mx1.example.test",
          "helo": "mx1.example.test",
          "address": "203.0.113.10",
          "forward_addresses": [
            "203.0.113.10"
          ],
          "forward_confirmed": true
        },
        {
          "ptr": "mx2.example.test",
          "helo": "mx2.example.test",
          "address": "203.0.113.11",
          "forward_addresses": [
            "203.0.113.99"
          ],
          "forward_confirmed": false
        },
        {
          "ptr": "198-51-100-7.static.hosting-vendor.test",
          "helo": "mail.example.test",
          "address": "198.51.100.7",
          "forward_addresses": [
            "198.51.100.7"
          ],
          "forward_confirmed": true
        }
      ],
      "limits": {
        "maxRecords": 2000,
        "maxFindings": 500,
        "maxHeaderBytes": 131072,
        "maxIncludeTree": 200,
        "spfLookupLimit": 10,
        "maxRecordLength": 4096,
        "spfVoidLookupLimit": 2
      },
      "passed": false,
      "complete": true,
      "findings": [
        {
          "code": "REVERSE_NOT_FORWARD_CONFIRMED",
          "name": "mx2.example.test",
          "detail": "203.0.113.11 resolves to mx2.example.test, and mx2.example.test resolves to 203.0.113.99 rather than back to 203.0.113.11. Forward confirmation fails, which is worse than having no PTR because it look..."
        },
        {
          "code": "REVERSE_NAME_OUTSIDE_EXPECTED_DOMAIN",
          "name": "198-51-100-7.static.hosting-vendor.test",
          "detail": "198.51.100.7 resolves to 198-51-100-7.static.hosting-vendor.test, which is not inside example.test. A reverse name belonging to a hosting provider rather than the sender is what a receiver sees."
        },
        {
          "code": "REVERSE_NAME_LOOKS_GENERIC",
          "name": "198-51-100-7.static.hosting-vendor.test",
          "detail": "198.51.100.7 resolves to 198-51-100-7.static.hosting-vendor.test, which reads as a provider-generated name rather than a mail host. Several receivers score or refuse mail from generically named hosts."
        }
      ],
      "consistent": false,
      "host_count": 4,
      "request_id": "example-request",
      "service_id": "reverse_dns_consistency_audit",
      "assumptions": [
        "Nothing resolves DNS. The caller supplies the address, its reverse name and what that name resolves to, which is the triple a receiver actually evaluates.",
        "Forward confirmation is the check receivers apply, so a reverse name that resolves to a different address is reported as worse than having none: it looks configured and still fails.",
        "A generically named reverse host is reported as a signal rather than a defect, because several receivers score or refuse on it and the name is the only thing they see."
      ],
      "limitations": [
        "The triples supplied. Which receivers apply which rule, and how heavily, is outside this, and so is any prediction about deliverability.",
        "consistent is true only when every host had a reverse name, every one was forward confirmed, and every check the caller asked for was performed."
      ],
      "observed_at": "2026-10-02T00:00:00.000Z",
      "not_examined": [],
      "finding_count": 5,
      "expected_domain": "example.test",
      "service_version": "1.0.0",
      "findings_by_code": {
        "NO_REVERSE_NAME": 1,
        "REVERSE_NAME_LOOKS_GENERIC": 1,
        "REVERSE_NOT_FORWARD_CONFIRMED": 1,
        "HELO_DOES_NOT_MATCH_REVERSE_NAME": 1,
        "REVERSE_NAME_OUTSIDE_EXPECTED_DOMAIN": 1
      },
      "forward_confirmed_count": 2,
      "without_reverse_name_count": 1
    }
  }
}