Gmail 550 5.7.1: the IP you're using to send email is not authorized
Gmail refused the connection because the IP address your mail came from is in a range its ISP doesn't authorize to send mail directly, typically a home or dynamic broadband address.
550 5.7.1 The IP you're using to send email is not authorized to send email directly to our servers. Use the SMTP relay at your service provider instead.
Gmail's text for this 550 5.7.1, as listed in Google's SMTP errors reference (the published line also points to a help article).
What 550 5.7.1 means
Google says Gmail refuses mail from IP addresses that aren't authorized to send mail, to prevent spam, and that the decision is made by the ISP that provides the IP address. The list typically contains consumer ranges for dial-up, DSL and other broadband access. In other words, Gmail isn't judging your message or your domain; it's refusing direct delivery from that kind of connection.
This usually hits small offices running their own mail server on an ordinary internet line, NAS boxes and home servers sending alerts, and scripts on a laptop sending straight to Gmail's MX. Google lists the fixes: use the SMTP relay your ISP provides, get a business-class or static IP that the ISP authorizes, or send through your own domain's mail servers, either by allowing relay from your IP or by submitting mail with authentication (a mail submission agent).
Google also says it can't allowlist IP addresses or make exceptions, so asking Gmail to unblock the address won't help. Because the reply is 550, the message bounced and won't be retried.
Likely causes
- Your server sends directly to Gmail from a home or dynamic broadband IP address.
- The ISP lists your IP range as not authorized to send mail.
- A device or script delivers straight to Gmail's MX instead of through your mail provider.
How to fix it
If you sent the message
- Send through your email provider or ISP's SMTP relay with authentication on port 587, instead of delivering directly.
- If you must run your own server, ask your ISP for a business or static IP that's authorized for mail, with a matching PTR record.
- Don't ask Google for an exception: Google says it can't allowlist IP addresses.
If you're the recipient or their admin
- No action needed at Gmail: the sender has to change how the mail leaves their network.
Frequently asked questions
Can Google unblock my IP for the 'not authorized to send email directly' error?
No. Google says it's unable to allowlist IP addresses or make exceptions. The ISP decides whether the range is authorized, so the fix is to send through a relay or get an authorized business IP.
Why can I send to other providers but not Gmail from my home server?
Receivers use different policies. Gmail refuses direct delivery from IP ranges the ISP marks as not authorized for mail, which typically covers dial-up, DSL and other consumer broadband.
Sources
- Gmail SMTP errors and codes (Google Workspace Admin Help)
- 'The IP you're using to send email is not authorized...' (Gmail Help)
- RFC 6409: Message Submission for Mail
Provider messages are quoted as the provider publishes them. Servers can change their wording, so the bounce you received may differ slightly.
Related codes
- 550 5.7.1 550 5.7.1: Gmail blocked likely unsolicited mail or low reputation
- 550 5.7.25 550 5.7.25: reverse DNS validation failed
- 421 4.7.0 421 4.7.0: Gmail is temporarily deferring your mail
- 550 5.7.1 550 5.7.1: delivery not authorized, message refused
- 550 5.7.1 Gmail 550 5.7.1: message is not RFC 5322 compliant
- 550 5.7.1 550 5.7.1 Service unavailable; client host blocked using a blocklist
- 550 5.2.1 550 5.2.1: the email account that you tried to reach is inactive
Related guides
What is a smart host, and when do you need an SMTP relay?
What a smart host (SMTP relay) is, how it differs from an open relay, when apps, printers and servers need one, how to authenticate, and the SPF and DKIM impact.
9 min read Email security basicsSMTP ports 25, 587, 465 and 2525: which one should you use?
Which SMTP port to use: 25 for server-to-server relay, 587 with STARTTLS or 465 with implicit TLS for sending from apps, and why port 25 is often blocked.
10 min read Running email day to dayReverse DNS and PTR records for mail servers
What a PTR record is, why Gmail, Yahoo and others require forward-confirmed reverse DNS for sending IPs, who can set it, and how to check yours is right.
8 min read Running email day to dayShared vs dedicated IP for email: which one do you need?
Shared vs dedicated sending IPs: how each affects reputation, cost and warm-up, what Amazon SES, SendGrid and Mailgun say about volume, and how to choose.
9 min read