Skip to content
Gmail and Google Workspace · permanent error

5.7.32: from domain not aligned, blocked

Gmail blocked your message because the domain in its From address aligns with neither the domain that passed SPF nor the domain that signed DKIM.

Gmail
Provider
Permanent (5xx)
Class
Sources checked
Author

At a glance

Code
5.7.32
Temporary or permanent
PermanentRefused for good: the message comes back to the sender, and resending it gets the same answer.
Who has to act
The sender. The fix is on the sending side: your domain, your server or your list.
What the server says
5.7.32 Your email was blocked because the From: header (RFC5322) in this message…

What it means

This is the blocking form of Gmail's alignment requirement: the From domain must share an organizational domain with the domain that passed SPF, or with the domain in a valid DKIM signature. Google's SMTP reference prints it with the reply code 421, a mismatch: 421 is a temporary reply, while an enhanced code starting with 5 means a permanent failure. This entry lists the enhanced code alone. The wording says the email was blocked, so do not count on a retry to deliver it. Fix alignment, then send it again.

Common causes

  • A sending provider's default DKIM signature on its own domain instead of yours.
  • An envelope sender (Return-Path) on the provider's domain, so SPF passes for them and not for you.
  • A From address on a domain that none of your sending services authenticate.

How to fix it

  1. 01Compare the SPF and DKIM domains in the Authentication-Results header of a test message with your From domain.
  2. 02Set up DKIM at your sending provider with your own domain as d=, or a custom Return-Path on your domain.
  3. 03Check the result with a DMARC lookup.
  4. 04Resend the message once alignment passes.

Sources

What this page rests on, checked on 20 Oct 2026. The explanation is ours; the reply text is the server's.

  1. 421 4.7.32From domain not aligned, rate limited.Gmail is rate limiting your mail because the domain in its From address matches neither the domain that passed SPF nor the one that signed DKIM.GmailTemporary
  2. 550 5.7.26Rejected under the sender's DMARC policy.Gmail rejected the message because it failed DMARC, and the From domain's DMARC policy tells receivers to refuse mail that fails.GmailPermanent

Further reading

All 108 Gmail codesEvery code in the wikiPaste your own bounce

Beat · paid monitoring

A heartbeat for your email.

Beat runs every check on this site on a schedule: 41 checks, 33 blacklists and real inbox placement. The moment something breaks, it tells you what broke, why it matters, and the exact fix.

example.comWatching
  • SPFpass
  • DKIMpass
  • DMARCp=none
  • Blacklists0 of 33

Illustrative. Your domain, every few hours.

Also from us:Pulse: your own sending infrastructureConsulting: $65/hr, no retainer