5.4.1 Microsoft bounce: relay access denied
What 5.4.1 means
The mail server that generated the bounce does not accept mail for the recipient's domain. This points to a mail server or DNS misconfiguration.
Message text
Relay Access Denied
Common causes of 5.4.1
- MX for the recipient domain points to a server that does not accept mail for that domain
- Mail server or DNS misconfiguration
How to fix 5.4.1
- Run MX lookup on the recipient domain and confirm the MX points to the server that should accept its mail.
- If you run the recipient domain, correct the accepted-domain setting on the mail server.
Check your domain
Check the MX records of the recipient domainRuns in your browser; nothing is uploaded.
Have the full bounce message? Paste it into the bounce code lookup and it will match the code and the provider for you. Open the bounce code lookup.
How to read 5.4.1
The second part, 5.4.1, is an enhanced status code (RFC 3463 §2) written class.subject.detail. Class 5 is a Permanent failure (5xx): the command was rejected and the sender should not repeat it unchanged (RFC 5321 §4.2.1; RFC 3463 §2).. Subject 4 is network and routing: a problem reaching or routing to the destination. The detail number refines the subject, and providers may define details of their own, which is why one code can read differently at Gmail, Microsoft and Yahoo.
Do not keep resending the same message: a permanent failure repeats until the cause is fixed. Correct the cause, then send a new message.
Official source: learn.microsoft.com. Last verified 2026-10-20.
Related guides
- How to set up MX records (priorities, null MX, migration)
- MX host does not resolve: causes and how to fix it
- Null MX (RFC 7505): publish it for domains with no mail
Related codes
- 5.4.1 Microsoft: recipient rejected
- 5.4.4 SMTP: unable to route
- 5.4.14 Microsoft: routing loop
- 550 5.1.1 Microsoft: bad mailbox address
- 550 5.1.10 Microsoft: recipient not found
- 550 5.5.0 Microsoft: mailbox unavailable
FAQ
What does 5.4.1 mean?
The mail server that generated the bounce does not accept mail for the recipient's domain. This points to a mail server or DNS misconfiguration. This is a permanent failure.
How do I fix 5.4.1?
Run MX lookup on the recipient domain and confirm the MX points to the server that should accept its mail. If you run the recipient domain, correct the accepted-domain setting on the mail server.
Is 5.4.1 permanent, and should I retry?
5.4.1 is a permanent failure, so retrying the same message will fail again. Fix the cause first, then send a new message.