Mail errors · Gmail

What does “421 4.7.32 Your email has been rate limited because the From: header (RFC5322) in this message isn't aligned with either the authenticated SPF or DKIM organizational domain” mean?

The message passed SPF or DKIM, but for a domain other than the one in its From address.

Last read from the sources at the foot of this page.

Check my firm Read the steps
Gmail bounce
Mail Delivery Subsystem
421 4.7.32

Your email has been rate limited because the From: header (RFC5322) in this message isn't aligned with either the authenticated SPF or DKIM organizational domain

As Gmail prints it.
01

What does it mean?

DMARC alignment means the domain in the From address matches the domain that passed SPF or the domain that signed with DKIM. Here neither matches, so the pass does not count for your domain.

02

What exactly does the source say?

421 4.7.32 Your email has been rate limited because the From: header (RFC5322) in this message isn't aligned with either the authenticated SPF or DKIM organizational domain. Learn more about DMARC alignment. To learn more about Gmail requirements for bulk email senders, visit Email sender guidelines.

Gmail's page writes domain-name and ip-address where your bounce shows your own domain and the sending address.

Same fix: 421 5.7.32
421 5.7.32 Your email was blocked because the From: header (RFC5322) in this message isn't aligned with either the authenticated SPF or DKIM organizational domain. Learn more about DMARC alignment. To learn more about Gmail requirements for bulk email senders, visit Email sender guidelines.
03

Why would a small firm see it?

A service sends in your name using its own domain for bounces and its own DKIM signature. This is common with newsletter, invoicing and booking tools that were never given your domain.

04

How do I fix it?

  1. Open the service's settings and find its domain authentication or DKIM setting.
  2. Add the records it gives for your domain at your DNS host, so it signs your mail as your domain.
  3. Send a test message and open its headers.The domain after header.d= should be your own.
05

What else do the sources say?

For direct email, the domain in the sender's From: header must be aligned with either the SPF domain or the DKIM domain. This is required to pass DMARC alignment.

Sources

Where does this come from?

Related
07 · Check my firm

See what is open before anyone else does.

We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.

What we readPublic sources only
Who sees itYou alone
Delivery72 hours from confirmation
Meeting firstNone
Reading requestPrivate
Problem: Enter your firm's name.
Problem: Enter your name.
Problem: Enter a full address, like [email protected].
Problem: That does not look like a website. Try yourdomain.com.

A person reads every request. Your outside reading comes by email within 72 hours from [email protected]. Privacy