Skip to content
Gmail and Google Workspace · temporary error

421 4.7.32: from domain not aligned, rate limited

Gmail is rate limiting your mail because the domain in its From address matches neither the domain that passed SPF nor the one that signed DKIM.

Gmail
Provider
Temporary (4xx)
Class
Sources checked
Author

At a glance

Code
421 4.7.32
Temporary or permanent
TemporaryThe sending server keeps the message and tries again later.
Who has to act
The sender. The fix is on the sending side: your domain, your server or your list.
What the server says
421 4.7.32 …isn't aligned with either the authenticated SPF or DKIM organizational domain.

What it means

This is about DMARC alignment: the domain that passes SPF or DKIM has to share an organizational domain with the From address readers see. Your message authenticated, but only for some other domain, such as your sending provider's bounce domain or its default DKIM signature. Google's sender guidelines require bulk senders to align the From domain with SPF or DKIM, and fixing either one is enough. This is the temporary form, also listed in Google's sender guidelines FAQ. Google's SMTP reference prints the blocking form as 421 5.7.32, which has its own entry.

Common causes

  • A sending provider's default DKIM signature on its own domain instead of yours.
  • An envelope sender (Return-Path) on the provider's domain, so SPF passes for them and not for you.
  • A From address on a domain that none of your sending services authenticate.

How to fix it

  1. 01Read the Authentication-Results header of a test message to Gmail and compare the SPF and DKIM domains with your From domain.
  2. 02Set up DKIM at your sending provider with your own domain as d=.
  3. 03Or set a custom Return-Path on a subdomain of your From domain so SPF aligns.
  4. 04Check the result with a DMARC lookup and a fresh test message.

Sources

What this page rests on, checked on 20 Oct 2026. The explanation is ours; the reply text is the server's.

  1. 5.7.32From domain not aligned, blocked.Gmail blocked your message because the domain in its From address aligns with neither the domain that passed SPF nor the domain that signed DKIM.GmailPermanent
  2. 550 5.7.26Rejected under the sender's DMARC policy.Gmail rejected the message because it failed DMARC, and the From domain's DMARC policy tells receivers to refuse mail that fails.GmailPermanent
  3. 421Service not available.The receiving server is closing the connection and will not take mail right now. The reply is temporary, so the sending server keeps the message and tries again later.StandardTemporary

Further reading

All 108 Gmail codesEvery code in the wikiPaste your own bounce

Beat · paid monitoring

A heartbeat for your email.

Beat runs every check on this site on a schedule: 41 checks, 33 blacklists and real inbox placement. The moment something breaks, it tells you what broke, why it matters, and the exact fix.

example.comWatching
  • SPFpass
  • DKIMpass
  • DMARCp=none
  • Blacklists0 of 33

Illustrative. Your domain, every few hours.

Also from us:Pulse: your own sending infrastructureConsulting: $65/hr, no retainer