Skip to content
Standard SMTP codes · permanent error

5.7.30: REQUIRETLS not supported by the next server

The message was sent with a REQUIRETLS requirement, and none of the servers it had to go through next supports that requirement, so it was returned.

Standard
Provider
Permanent (5xx)
Class
Sources checked
Author

At a glance

Code
5.7.30
Temporary or permanent
PermanentRefused for good: the message comes back to the sender, and resending it gets the same answer.
Who has to act
The sender. The fix is on the sending side: your domain, your server or your list.
What the server says
5.7.30 REQUIRETLS support required

What it means

REQUIRETLS (RFC 8689) lets a sender demand that a message travel only over TLS-protected connections, to servers that also honour the requirement. If none of the next servers supports REQUIRETLS, the message cannot go on, and RFC 8689 says the non-delivery notice should use 5.7.30. If a TLS-protected session could not be set up at all, the code is 5.7.10 instead. The sender can resend without REQUIRETLS, where the content allows it, or reach the recipient another way.

Common causes

  • The recipient's mail servers do not offer the REQUIRETLS extension.
  • A relay on the path does not support REQUIRETLS.

How to fix it

  1. 01Decide whether the content needs REQUIRETLS; if not, resend without it.
  2. 02Ask the recipient whether their provider supports REQUIRETLS.
  3. 03If you run the relay, enable REQUIRETLS support or route these messages another way.

Sources

What this page rests on, checked on 20 Oct 2026. The explanation is ours; the reply text is the server's.

  1. 5.7.10Encryption needed.The server requires an encrypted connection (TLS) before this kind of login can happen, or a message that demands TLS could not be passed on securely.StandardPermanent

5.7.30 at other providers

  1. 550 5.7.30DKIM did not pass, blocked.Gmail rejected the message because it failed DKIM, which Gmail requires of bulk senders along with SPF.GmailPermanent

Further reading

All 105 standard codesEvery code in the wikiPaste your own bounce

Beat · paid monitoring

A heartbeat for your email.

Beat runs every check on this site on a schedule: 41 checks, 33 blacklists and real inbox placement. The moment something breaks, it tells you what broke, why it matters, and the exact fix.

example.comWatching
  • SPFpass
  • DKIMpass
  • DMARCp=none
  • Blacklists0 of 33

Illustrative. Your domain, every few hours.

Also from us:Pulse: your own sending infrastructureConsulting: $65/hr, no retainer