B2B security gateways
Mimecast greylisting and rejections
Read temporary deferrals and route persistent failures to the correct owner.
Recognize greylisting
Mimecast greylisting can temporarily defer a previously unseen combination of connecting IP, envelope sender and recipient. The sending MTA must retry through its normal queue. Mimecast’s policy documentation describes a retry window, but other controls and customer policies can still determine the final result.
Investigate a retry failure
- Preserve the full 451 response and the initial connection timestamp.
- Check the sending service’s queue logs for a real retry, rather than a fresh campaign submission.
- Compare the connecting IP and envelope identities across attempts. Ask the ESP whether retries preserve the relevant sending route.
- If the recipient administrator sees Sender Failed to Retry, compare that event with the sender’s retry logs before changing policy.
Separate other rejection causes
| Response evidence | Next action |
|---|---|
| Temporary deferral | Review scheduled retries and elapsed time. |
| Named DNSBL or IP reputation rejection | Identify the named list and investigate the actual connecting IP. |
| Recipient or policy restriction | Ask the authorized recipient administrator to inspect the rejection log. |
| Message accepted then quarantined | Use the recipient-side message evidence and policy result. |
Escalate with a complete timeline
SendPoint recommendation: submit the first attempt, subsequent attempts, response text and queue ID together. Explain whether the message expired, was accepted or remains queued. This prevents a greylisting observation from being mistaken for a permanent block.