Skip to content
GMX, WEB.DE and mail.com · temporary error

421: temporary reject under an exceptional blocklist

GMX refused the connection from your server for now under one of the blocklists it applies in exceptional situations. Your server will retry; GMX asks you to stop the misuse first, then contact it.

GMX, WEB.DE
Provider
Temporary (4xx)
Class
Sources checked
Author

At a glance

Code
421
Temporary or permanent
TemporaryThe sending server keeps the message and tries again later.
Who has to act
The sender. The fix is on the sending side: your domain, your server or your list.
What the server says
421 Administrative reject

What it means

GMX keeps some blocklists for exceptional situations, when it sees misuse it wants to stop quickly to protect its infrastructure. Cases r0001 and r0003 are the temporary form: the reply starts with 421, so your server keeps the message and tries again later. The case page gives no specific trigger, only the instruction to stop whatever is sending unwanted connections or spam from your system. Retries will keep meeting the same answer while the block is in place. After the cause is dealt with, GMX asks you to get in touch through the form on the case page.

Common causes

  • Your server or network sent spam or other unwanted connections to GMX.
  • A compromised account, script or open relay on your system is being misused.
  • Your IP address sits in a range GMX has blocked to stop an ongoing abuse.

How to fix it

  1. 01Check your outbound queue and logs for mail you did not intend to send, and stop it.
  2. 02Close any open relay, reset compromised passwords and remove scripts that send without authorisation.
  3. 03Let your server retry on its normal schedule rather than resending by hand.
  4. 04Once the cause is fixed, use the contact form on the case page (or postmaster.gmx.net/en/contact) and include the full last line of the error, your IP addresses and your domain.

Sources

What this page rests on, checked on 20 Oct 2026. The explanation is ours; the reply text is the server's.

  1. 451Temporary reject for misuse or guideline violations.GMX deferred your mail with a 451 because of an exceptional blocklist or a breach of its sending guidelines. The message is retried, but the cause has to be removed first.GMX, WEB.DETemporary
  2. 550Permanent reject under an exceptional blocklist.GMX permanently refused mail from your system because it is on one of the blocklists GMX uses in exceptional situations. The message comes back and is not retried.GMX, WEB.DEPermanent
  3. 550Administrative reject.IONOS does not allow delivery from your system for administrative reasons. Only IONOS can say why, so the step is to contact it.IONOSPermanent
  4. 421Service not available.The receiving server is closing the connection and will not take mail right now. The reply is temporary, so the sending server keeps the message and tries again later.StandardTemporary

421 at other providers

  1. 421 [RP-001]Outlook.com rate limit for the sending IP.Outlook.com is limiting how fast your IP can send to it because of the IP or domain's reputation; it is temporary and your server should retry.MicrosoftTemporary
  2. 421 [RP-002]Outlook.com rate limit on this connection.Your IP has sent more over a single connection than Outlook.com allows, a limit Microsoft ties to IP and domain reputation.MicrosoftTemporary
  3. 421 [RP-003]Outlook.com connection limit.Your IP has opened more connections to Outlook.com than it is allowed, a limit Microsoft links to IP and domain reputation.MicrosoftTemporary
  4. 421Temporary error or deferral.Yahoo or AOL refused your message for now with a 421, one of its two temporary error codes. Your server should keep it and retry; repeated deferrals point to reputation or complaints.YahooTemporary
  5. 421Try again later.Xfinity turned the message away for now with a generic 421. Treat it as temporary and let your server retry: Xfinity uses it for several reasons it does not spell out.ComcastTemporary
  6. 421Reverse DNS lookup failed.Xfinity could not complete a reverse DNS lookup for your sending IP. It treats this as temporary, so your server should retry, but a broken DNS setup keeps it failing.ComcastTemporary

Further reading

All 57 GMX, WEB.DE codesEvery code in the wikiPaste your own bounce

Beat · paid monitoring

A heartbeat for your email.

Beat runs every check on this site on a schedule: 41 checks, 33 blacklists and real inbox placement. The moment something breaks, it tells you what broke, why it matters, and the exact fix.

example.comWatching
  • SPFpass
  • DKIMpass
  • DMARCp=none
  • Blacklists0 of 33

Illustrative. Your domain, every few hours.

Also from us:Pulse: your own sending infrastructureConsulting: $65/hr, no retainer