What does “451 4.7.26 Unauthenticated email from domain-name is not accepted due to domain's DMARC policy, but temporary DNS failures prevent authentication” mean?
Gmail could not finish checking the message against your records because a DNS lookup failed for a moment, and your DMARC policy asks for unchecked mail to be refused.
Last read from the sources at the foot of this page.
Unauthenticated email from domain-name is not accepted due to domain's DMARC policy, but temporary DNS failures prevent authentication
What does it mean?
A 451 reply means try again later. Gmail could not read your SPF, DKIM or DMARC record at that moment, so it could not tell whether the message was really yours.
What exactly does the source say?
451 4.7.26 Unauthenticated email from domain-name is not accepted due to domain's DMARC policy, but temporary DNS failures prevent authentication. Please contact the administrator of domain-name domain if this was a legitimate email. To learn about the DMARC initiative, go to Control unauthenticated mail from your domain.
Gmail's page writes domain-name and ip-address where your bounce shows your own domain and the sending address.
Why would a small firm see it?
Your DNS host did not answer in time, or one of the name servers listed for your domain does not answer at all.
How do I fix it?
- Wait for the sending server to retry.Most messages go through on a later attempt.
- If it keeps happening, check that every name server listed for your domain at the company that holds the domain is one your DNS host still runs.
- Check that your SPF, DKIM and DMARC records answer from each of those name servers.
Where does this come from?
- Google Workspace: Gmail SMTP errors and codesknowledge.workspace.google.comRead 14 October 2026
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/