The server is returning diagnostic or status information you asked for.
Not an error — read the text that comes with it.
A bounce message gives you a cryptic code and little else. Search the code below to see what it means, what usually causes it, and what to try next.
A real bounce often shows two codes together, like 550 5.1.1. The 3-digit code (550) is the classic reply; the dotted code (5.1.1) is the precise enhanced status. You can paste either — or the whole line — into the search.
Not errors — greetings, confirmations, and mid-conversation steps. If you see these, things are working.
The server is returning diagnostic or status information you asked for.
Not an error — read the text that comes with it.
A response to the HELP command.
Informational — usually points to the server’s documentation or a FAQ.
The greeting the server sends when you connect.
Nothing to do — it means the server is up and ready for commands.
The session ended cleanly after your mail was handed off.
Normal end-of-session message. Nothing to do.
Your AUTH login was accepted.
You are logged in and can send.
The command succeeded.
On the final step this means the message was accepted for delivery — the opposite of an error.
The recipient is not hosted here, so the server will relay it onward.
A normal relay action — nothing to fix.
The server cannot confirm the address exists but will try anyway.
Usually fine — watch for a later bounce if the address turns out to be bad.
The server could not act right now but the message is not lost. It is safe to retry, and most servers will retry for you.
The connection to the remote server stalled mid-transfer, usually a Path MTU or firewall problem. The standard transient code is 421.
Retry, then fix Path MTU Discovery or firewall/ICMP filtering on the sending host.
Your server retried delivery for hours but each attempt hit a temporary failure until the message expired in the queue.
Fix the underlying transient failure: recipient MX/DNS, connectivity, or a backed-up queue.
Exchange could not route the message, usually a deleted routing group or a misconfigured SMTP connector.
Correct the connector and routing-group configuration.
The relay you asked to flush queued mail could not queue for that host, often because it does not relay for that domain.
Confirm the relay serves that node; retry ETRN later.
Your own server stopped the message: an outbound anti-spam/antivirus filter, or an Exchange database issue.
Read the full log, then tune the named filter or repair the Exchange store.
The recipient mailbox is over quota. The real bounce is 452 4.2.2.
Treat as a temporary soft bounce: retry with backoff until the recipient frees space.
Your server could not reach the recipient mail host, or your AuthSMTP account is over quota.
Retry; if it persists, check the recipient MX reachability and your outbound port 25.
The session died mid-send. The standard form is a 421 with enhanced status 4.4.2.
Retry, raise SMTP timeouts, and stabilize the network path.
The message passed through too many servers, almost always a forwarding loop. The real bounce is 554 5.4.6.
Find and break the forwarding or connector loop.
Too many simultaneous connections, a rate limit, or a temporary server problem.
Back off and retry later; if it is constant, check you are not exceeding connection or sending limits.
The mailbox is busy or locked, or you are being greylisted / throttled on reputation.
Retry later — greylisting usually clears on the second attempt.
A processing error on the receiving side, often a content or anti-spam check, or overload.
Retry; if it persists it is usually a reputation or filter issue worth investigating.
The server is out of resources, or you sent too many recipients at once.
Retry, and split large recipient lists into smaller batches.
The receiving server is temporarily out of resources.
Retry later with backoff.
The recipient mail queue is paused on the receiving side.
Retry later; the recipient admin resumes the queue.
The server could not complete AUTH or STARTTLS right now (RFC 4954).
Retry; verify TLS is available and credentials are correct.
A valid command carried parameters the server cannot handle right now (RFC 5321).
Retry, or drop the unsupported ESMTP parameter.
The server refused the message and will not try again. Fix the underlying cause before you resend.
The recipient mailbox does not exist. The real bounce is 550 5.1.1.
Correct the recipient address and remove dead addresses from your list.
Vendors disagree: some map 513 to bad address syntax (5.1.3), others to authentication or relay denial.
Read the full bounce text, then fix the malformed address or the authentication.
Not an RFC code. Vendors disagree: some map 517 to a malformed sender mail attribute (often Exchange), others to the recipient blocking the sender on policy.
Read the full server text, then fix the sender address attribute or check your reputation.
The recipient mailbox is over its storage quota. The real code is 552 5.2.2.
The recipient must free space or raise their quota; stop retrying and verify the address.
Not an RFC code. Usually enhanced status 5.3.3, the destination cannot support a requested feature.
Read the full server text; if it is 5.3.3, stop requesting the unsupported SMTP extension.
A vendor synonym for a nonexistent or malformed recipient; the real bounce is 550 5.1.1 or 553.
Correct or remove the recipient address; read the real code in the bounce.
The recipient domain after the @ cannot be resolved or has no mail server.
Fix the domain typo or the recipient domain MX / DNS records.
An error-list label for an invalid or nonexistent recipient; the real codes are 550, 551, or 553.
Correct the recipient address; act on the real code in the bounce.
The server answers at connection time to signal it never accepts inbound mail (RFC 7504).
Send only to a domain with valid MX records and a listening SMTP server.
The message is larger than the recipient per-mailbox size limit; the real reply code is 552.
Reduce total message size or link large attachments.
A relabeling of enhanced status 4.3.1, or of a 530 / 535 authentication failure.
Read the raw code: free space or retry for storage, or fix credentials for auth.
The SASL mechanism you offered is weaker than server policy allows (RFC 4954).
Use OAuth2 or an App Password over TLS.
You tried to authenticate over an unencrypted connection (RFC 4954).
Enable STARTTLS on 587 or implicit TLS on 465 before AUTH.
Either enhanced status 5.4.0 (undefined network / routing) or a provider string such as Rambler Inactive / Blocked.
Read the bounce text; verify the recipient and your sender reputation.
No RFC defines 542; the real rejection is a different 4xx / 5xx in your logs.
Find the actual code and enhanced status and act on that.
A routing or DNS failure rendered as a fake 543.
Verify the recipient domain MX / DNS records resolve.
A message was forwarded in a loop until it passed the hop limit.
Remove the circular forwarding rule, alias, or auto-responder.
Your server retried for days, never reached the recipient, and bounced the message.
Check recipient MX / DNS and reachability, and your own queue.
An unsupported ESMTP parameter or malformed envelope command (RFC 5321).
Fix the envelope syntax and drop unsupported extension parameters.
The recipient domain publishes a null MX record and accepts no email (RFC 7504 / 7505).
Verify the recipient domain; only its owner can publish valid MX records.
A malformed command, sometimes a firewall or antivirus mangling the SMTP stream.
Check your mail client or relay config and any security software sitting between you and the server.
Usually a malformed email address or a bad command argument.
Verify the sender and recipient addresses are correctly formatted.
The server does not support the command your client issued.
Check your client config or the server’s advertised capabilities.
Commands were sent out of order, or authentication is required before this step.
Make sure your client authenticates and follows the correct SMTP handshake order.
A parameter you passed is not supported by the server.
Check the command syntax your client is using.
You tried to send without logging in, or STARTTLS is required first.
Enable SMTP authentication (username/password or API key) in your client.
Wrong credentials, or an app password / API key that was not accepted.
Re-check credentials — many providers require an app-specific password or API key rather than your normal login.
The recipient’s spam filter refused it (non-standard code).
Content or reputation triggered a block — improve sender reputation and ask the recipient to whitelist you.
Most often the recipient address does not exist; can also be a policy or reputation block.
Verify the address is correct and still active. If it does exist, the rejection is reputation-based.
The server will not relay mail for your address.
Send through a server you are authorized to relay on — authenticate to your own provider.
The recipient’s mailbox is full, or the message exceeds the size limit.
Reduce attachment size; if the mailbox is full, reach the recipient another way.
The recipient address is malformed or not permitted.
Check the address for typos and formatting errors.
A catch-all permanent rejection — usually the message was flagged as spam or the sending IP is blacklisted.
Check blacklists for your IP and domain, then repair and warm up sender reputation.
The server reported only a general failure class with no specifics. Read the full bounce text for the real reason.
Something is wrong with the sender or recipient address itself.
Unspecified problem with sender or recipient address
Verify the complete email address and domain
Recipient mailbox does not exist
Check for typos and verify the recipient address
Recipient domain does not accept mail or is invalid
Check the domain and its MX/DNS records
Recipient address is malformed
Correct the address format
Address maps to more than one recipient
Use the recipient's exact mailbox address
Positive delivery status
No fix needed
Mailbox existed previously but no longer accepts mail
Get the recipient's current address
Sender address is malformed
Correct the From / envelope sender address
Sender domain is invalid or cannot accept return mail
Check sender-domain DNS and address configuration
Message was forwarded to a system that cannot report more detail
Check the downstream relay or destination system
Recipient domain explicitly does not accept email
Do not retry unless the recipient domain changes its mail configuration
The recipient exists, but their mailbox can't accept the message right now.
Mailbox exists, but an unspecified mailbox problem occurred
Check the detailed bounce text or contact the recipient
Recipient mailbox exists but is not accepting mail
Wait if temporary or contact the recipient another way
Recipient exceeded mailbox quota
Retry later or ask the recipient to free space
Message is too large for that mailbox
Reduce attachments / message size and resend
Distribution list could not expand its members
Retry later or contact the list administrator
The problem is on the receiving mail system, not with your message or address.
Unspecified issue on destination mail system
Check the server response and retry if temporary
Destination server storage is exhausted
Retry later
Destination server is overloaded, down, or under maintenance
Retry later or contact the receiving administrator
Destination cannot support a requested mail feature
Remove or change the unsupported feature
Message exceeds receiving system's maximum size
Reduce message or attachment size
Receiving mail system configuration prevents delivery
Recipient administrator needs to fix the server
Message was accepted but priority was altered
Usually no action required
The message couldn't find or reach the destination server.
Unspecified network or routing problem
Check DNS, routing, and full server response
Remote server did not respond
Retry later and check destination-server availability
Connection timed out or degraded during delivery
Retry and check connectivity / TLS / network quality
DNS or another directory service was unavailable
Retry after DNS / directory service recovers
No usable route to destination was found
Check recipient-domain DNS and MX records
Destination system is overloaded
Retry later
Mail keeps forwarding between servers
Fix forwarding, MX, or routing configuration
Message remained undelivered until retry period expired
Investigate the earlier delivery failures before resending
The SMTP conversation itself broke down — a command or protocol issue.
Unspecified SMTP / protocol problem
Check the full SMTP response and client / server compatibility
SMTP command was unsupported or sent out of sequence
Fix SMTP command order or client configuration
SMTP command syntax could not be parsed
Correct the malformed SMTP command
Message contains more recipients than server allows
Split recipients into smaller batches
Valid SMTP command contained unsupported / invalid values
Correct the command parameters
Client and server use incompatible protocol versions
Update or reconfigure the SMTP client / server
AUTH response exceeds server buffer / mechanism limit
Use a supported authentication mechanism or update the client
The message content, format, or encoding caused the delivery problem.
Message content caused an unspecified delivery problem
Inspect content format and full bounce response
Receiver cannot process the message content type
Resend using supported MIME / content formats
Delivery requires content conversion that policy forbids
Change message format or conversion policy
Gateway cannot perform required message conversion
Send using a more compatible format
Message delivered after conversion lost some data
Usually no fix needed unless the loss is unacceptable
Required message conversion was unsuccessful
Change content format or fix the conversion gateway
Server could not retrieve externally stored content
Restore / access the content source and retry
Server / client does not support internationalized mailbox address
Use an ASCII address or SMTPUTF8-capable infrastructure
Server needs SMTPUTF8 response support the client lacks
Use an SMTPUTF8-capable client
One or more recipients cannot receive the SMTPUTF8 message
Use compatible recipient infrastructure or ASCII headers
Duplicate of X.6.8
Treat as X.6.8
Authentication, encryption, or the receiver's policy blocked the message. This is where reputation problems show up.
Unspecified security or policy rejection
Read the full rejection text and check receiver policy
Sender is blocked by recipient / host policy
Check authentication, reputation, allowlists, and recipient policy
Sender is not permitted to post to the list
Request permission or use an authorized sender
Secure-message conversion cannot be performed
Align encryption / security formats between systems
Receiver does not support requested security feature
Use a supported authentication / security method
Required key or certificate is unavailable or invalid
Fix certificates, keys, or encryption configuration
Receiver does not support required algorithm
Use a mutually supported cryptographic algorithm
Message was corrupted or altered
Check signing, transport, and message modification
Username, password, or token is incorrect or insufficient
Update SMTP credentials and authenticate again
Server requires a stronger AUTH method
Switch to a stronger supported authentication mechanism
AUTH method requires a secure transport layer
Enable TLS before authenticating
Selected AUTH method cannot be used without encryption
Connect using TLS or choose another AUTH method
Account must migrate to a new authentication method
Complete the required password / authentication transition
SMTP account has been disabled
Contact the provider or admin to restore the account
Submission server requires configured trust with another service
Configure the required trust relationship
Server currently refuses mail below a priority threshold
Increase priority if appropriate or retry later
Size exceeds the limit for that priority class
Reduce size, raise priority if appropriate, or retry later
Recipient mailbox changed ownership after the specified RRVS date
Verify the intended recipient before resending
Recipient domain ownership changed after the RRVS date
Verify the destination before resending
Receiver lacks timestamp data required for RRVS validation
Decide whether to resend without RRVS protection
Message has no DKIM signature that validates successfully
Fix DKIM signing, selector, DNS record, and message-modification issues
DKIM passes technically but the receiver does not accept the signature
Check signing domain, selector, alignment, and receiver policy
Passing DKIM signature does not match the From domain
Configure DKIM alignment with the author domain
SPF returned fail
Correct the SPF record and authorized sending sources
SPF evaluation itself failed due to a DNS or configuration error
Check SPF syntax, DNS availability, and lookup limits
Sending IP failed the receiver's PTR / rDNS check
Configure valid PTR and matching forward DNS
More than one authentication mechanism failed
Check SPF, DKIM, DMARC, and related authentication together
Sender domain explicitly declares it receives no mail
Use a valid return-path domain that accepts mail
Message resembles a large flood of abusive mail
Stop excessive sending, investigate compromise, and reduce / review traffic
ARC chain did not validate
Check ARC seals / signatures and intermediary modifications
Next-hop server cannot meet the message's REQUIRETLS requirement
Use a route that supports REQUIRETLS or remove the requirement if appropriate
Try just the code (like 550 or 4.2.2) or a single
keyword. If you pasted a full bounce line, keep only the code part.
Auth failures, policy blocks, and flood flags (the X.7.x and 5xx codes) are what warmup prevents. Warm up your domain so your mail is trusted before you hit send.