
They added a new device that went live today.. Seems no one bothered to test first On 27 Nov 2017 4:56 PM, "Odhiambo Washington" <odhiambo@gmail.com> wrote: " is not permitted to\nrelay through this server without authentication.'" (16:56:41 <~>) 0 $ dig -x 197.248.254.120 +short 197-248-254-120.safaricombusiness.co.ke. Is that really their MX? (16:56:57 <~>) 0 $ telnet 197.248.254.120 25 Trying 197.248.254.120... Connected to 197-248-254-120.safaricombusiness.co.ke. Escape character is '^]'. 220 rat01.safaricombusiness.co.ke ESMTP Hmm... So they need to configure it with AUTH params. Maybe it's new students playing with server configs! On 27 November 2017 at 16:50, geoffrey gitagia <ggitagia@gmail.com> wrote:
@Wash , the shocker is that this is when a client sends emails to me , i can send to outside domains very nicely , basically they've blocked their own MX servers from relaying mails to my server , and they're are the ones hosting all services in my domain.
On Mon, Nov 27, 2017 at 4:41 PM, Odhiambo Washington <odhiambo@gmail.com> wrote:
If they have decided to enforce AUTH for all relayed mail, it will be a challenge if you do not have the AUTH details. They probably published the information somewhere or they don't want any TDH relaying through their servers. Use your own SMTP Server sir.
On 27 November 2017 at 16:22, geoffrey gitagia via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Guys
Anyone else affected by the below error
---------- Forwarded message ---------- From: Mail Delivery System <MAILER-DAEMON@rat01.safaricombusiness.co.ke> Date: Mon, Nov 27, 2017 at 3:47 PM Subject: Delivery Status Notification (Failure) To: ggitagia@gmail.com
The following message to <XXXXX@XXXXXXXXcom> was undeliverable. The reason for the problem: 5.1.0 - Unknown address error 550-'Please turn on SMTP Authentication in your mail client. \n(rat01.safaricombusiness.co.ke) [197.248.254.120]:42090 is not permitted to\nrelay through this server without authentication.'
Final-Recipient: rfc822;XXXXX@XXXXXXXXcom Action: failed Status: 5.0.0 (permanent failure) Remote-MTA: dns; [197.248.5.12] Diagnostic-Code: smtp; 5.1.0 - Unknown address error 550-'Please turn on SMTP Authentication in your mail client. \n(rat01.safaricombusiness.co. ke) [197.248.254.120]:42090 is not permitted to\nrelay through this server without authentication.' (delivery attempts: 0)
-- GG
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
-- GG
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."

Oh, nice. They deployed without testing? Maybe they do not have a procedure for testing before deployment or a guy overlooked it. On 27 November 2017 at 17:02, geoffrey gitagia <ggitagia@gmail.com> wrote:
They added a new device that went live today.. Seems no one bothered to test first
On 27 Nov 2017 4:56 PM, "Odhiambo Washington" <odhiambo@gmail.com> wrote:
" is not permitted to\nrelay through this server without authentication.'"
(16:56:41 <~>) 0 $ dig -x 197.248.254.120 +short 197-248-254-120.safaricombusiness.co.ke.
Is that really their MX?
(16:56:57 <~>) 0 $ telnet 197.248.254.120 25 Trying 197.248.254.120... Connected to 197-248-254-120.safaricombusiness.co.ke. Escape character is '^]'. 220 rat01.safaricombusiness.co.ke ESMTP
Hmm... So they need to configure it with AUTH params. Maybe it's new students playing with server configs!
On 27 November 2017 at 16:50, geoffrey gitagia <ggitagia@gmail.com> wrote:
@Wash , the shocker is that this is when a client sends emails to me , i can send to outside domains very nicely , basically they've blocked their own MX servers from relaying mails to my server , and they're are the ones hosting all services in my domain.
On Mon, Nov 27, 2017 at 4:41 PM, Odhiambo Washington <odhiambo@gmail.com> wrote:
If they have decided to enforce AUTH for all relayed mail, it will be a challenge if you do not have the AUTH details. They probably published the information somewhere or they don't want any TDH relaying through their servers. Use your own SMTP Server sir.
On 27 November 2017 at 16:22, geoffrey gitagia via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Guys
Anyone else affected by the below error
---------- Forwarded message ---------- From: Mail Delivery System <MAILER-DAEMON@rat01.safaricombusiness.co.ke
Date: Mon, Nov 27, 2017 at 3:47 PM Subject: Delivery Status Notification (Failure) To: ggitagia@gmail.com
The following message to <XXXXX@XXXXXXXXcom> was undeliverable. The reason for the problem: 5.1.0 - Unknown address error 550-'Please turn on SMTP Authentication in your mail client. \n(rat01.safaricombusiness.co.ke) [197.248.254.120]:42090 is not permitted to\nrelay through this server without authentication.'
Final-Recipient: rfc822;XXXXX@XXXXXXXXcom Action: failed Status: 5.0.0 (permanent failure) Remote-MTA: dns; [197.248.5.12] Diagnostic-Code: smtp; 5.1.0 - Unknown address error 550-'Please turn on SMTP Authentication in your mail client. \n( rat01.safaricombusiness.co.ke) [197.248.254.120]:42090 is not permitted to\nrelay through this server without authentication.' (delivery attempts: 0)
-- GG
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
-- GG
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."

this is the second time this weekend, they migrated my link but forgot to move a NAT on their side. On Mon, Nov 27, 2017 at 5:20 PM, Odhiambo Washington <odhiambo@gmail.com> wrote:
Oh, nice.
They deployed without testing? Maybe they do not have a procedure for testing before deployment or a guy overlooked it.
On 27 November 2017 at 17:02, geoffrey gitagia <ggitagia@gmail.com> wrote:
They added a new device that went live today.. Seems no one bothered to test first
On 27 Nov 2017 4:56 PM, "Odhiambo Washington" <odhiambo@gmail.com> wrote:
" is not permitted to\nrelay through this server without authentication.'"
(16:56:41 <~>) 0 $ dig -x 197.248.254.120 +short 197-248-254-120.safaricombusiness.co.ke.
Is that really their MX?
(16:56:57 <~>) 0 $ telnet 197.248.254.120 25 Trying 197.248.254.120... Connected to 197-248-254-120.safaricombusiness.co.ke. Escape character is '^]'. 220 rat01.safaricombusiness.co.ke ESMTP
Hmm... So they need to configure it with AUTH params. Maybe it's new students playing with server configs!
On 27 November 2017 at 16:50, geoffrey gitagia <ggitagia@gmail.com> wrote:
@Wash , the shocker is that this is when a client sends emails to me , i can send to outside domains very nicely , basically they've blocked their own MX servers from relaying mails to my server , and they're are the ones hosting all services in my domain.
On Mon, Nov 27, 2017 at 4:41 PM, Odhiambo Washington <odhiambo@gmail.com
wrote:
If they have decided to enforce AUTH for all relayed mail, it will be a challenge if you do not have the AUTH details. They probably published the information somewhere or they don't want any TDH relaying through their servers. Use your own SMTP Server sir.
On 27 November 2017 at 16:22, geoffrey gitagia via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Guys
Anyone else affected by the below error
---------- Forwarded message ---------- From: Mail Delivery System <MAILER-DAEMON@rat01.sa faricombusiness.co.ke> Date: Mon, Nov 27, 2017 at 3:47 PM Subject: Delivery Status Notification (Failure) To: ggitagia@gmail.com
The following message to <XXXXX@XXXXXXXXcom> was undeliverable. The reason for the problem: 5.1.0 - Unknown address error 550-'Please turn on SMTP Authentication in your mail client. \n(rat01.safaricombusiness.co.ke) [197.248.254.120]:42090 is not permitted to\nrelay through this server without authentication.'
Final-Recipient: rfc822;XXXXX@XXXXXXXXcom Action: failed Status: 5.0.0 (permanent failure) Remote-MTA: dns; [197.248.5.12] Diagnostic-Code: smtp; 5.1.0 - Unknown address error 550-'Please turn on SMTP Authentication in your mail client. \n( rat01.safaricombusiness.co.ke) [197.248.254.120]:42090 is not permitted to\nrelay through this server without authentication.' (delivery attempts: 0)
-- GG
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
-- GG
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
-- GG

this is the bugger causing all the problems *"Cisco C600V Email Security Virtual Appliance ", lemme ask for the password i sort myself* On Mon, Nov 27, 2017 at 5:38 PM, geoffrey gitagia <ggitagia@gmail.com> wrote:
this is the second time this weekend, they migrated my link but forgot to move a NAT on their side.
On Mon, Nov 27, 2017 at 5:20 PM, Odhiambo Washington <odhiambo@gmail.com> wrote:
Oh, nice.
They deployed without testing? Maybe they do not have a procedure for testing before deployment or a guy overlooked it.
On 27 November 2017 at 17:02, geoffrey gitagia <ggitagia@gmail.com> wrote:
They added a new device that went live today.. Seems no one bothered to test first
On 27 Nov 2017 4:56 PM, "Odhiambo Washington" <odhiambo@gmail.com> wrote:
" is not permitted to\nrelay through this server without authentication.'"
(16:56:41 <~>) 0 $ dig -x 197.248.254.120 +short 197-248-254-120.safaricombusiness.co.ke.
Is that really their MX?
(16:56:57 <~>) 0 $ telnet 197.248.254.120 25 Trying 197.248.254.120... Connected to 197-248-254-120.safaricombusiness.co.ke. Escape character is '^]'. 220 rat01.safaricombusiness.co.ke ESMTP
Hmm... So they need to configure it with AUTH params. Maybe it's new students playing with server configs!
On 27 November 2017 at 16:50, geoffrey gitagia <ggitagia@gmail.com> wrote:
@Wash , the shocker is that this is when a client sends emails to me , i can send to outside domains very nicely , basically they've blocked their own MX servers from relaying mails to my server , and they're are the ones hosting all services in my domain.
On Mon, Nov 27, 2017 at 4:41 PM, Odhiambo Washington < odhiambo@gmail.com> wrote:
If they have decided to enforce AUTH for all relayed mail, it will be a challenge if you do not have the AUTH details. They probably published the information somewhere or they don't want any TDH relaying through their servers. Use your own SMTP Server sir.
On 27 November 2017 at 16:22, geoffrey gitagia via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Guys
Anyone else affected by the below error
---------- Forwarded message ---------- From: Mail Delivery System <MAILER-DAEMON@rat01.sa faricombusiness.co.ke> Date: Mon, Nov 27, 2017 at 3:47 PM Subject: Delivery Status Notification (Failure) To: ggitagia@gmail.com
The following message to <XXXXX@XXXXXXXXcom> was undeliverable. The reason for the problem: 5.1.0 - Unknown address error 550-'Please turn on SMTP Authentication in your mail client. \n(rat01.safaricombusiness.co.ke) [197.248.254.120]:42090 is not permitted to\nrelay through this server without authentication.'
Final-Recipient: rfc822;XXXXX@XXXXXXXXcom Action: failed Status: 5.0.0 (permanent failure) Remote-MTA: dns; [197.248.5.12] Diagnostic-Code: smtp; 5.1.0 - Unknown address error 550-'Please turn on SMTP Authentication in your mail client. \n( rat01.safaricombusiness.co.ke) [197.248.254.120]:42090 is not permitted to\nrelay through this server without authentication.' (delivery attempts: 0)
-- GG
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
-- GG
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
-- GG
-- GG

Hahaaa... Hope they give you the password :-) On 27 November 2017 at 17:41, geoffrey gitagia <ggitagia@gmail.com> wrote:
this is the bugger causing all the problems *"Cisco C600V Email Security Virtual Appliance ", lemme ask for the password i sort myself*
On Mon, Nov 27, 2017 at 5:38 PM, geoffrey gitagia <ggitagia@gmail.com> wrote:
this is the second time this weekend, they migrated my link but forgot to move a NAT on their side.
On Mon, Nov 27, 2017 at 5:20 PM, Odhiambo Washington <odhiambo@gmail.com> wrote:
Oh, nice.
They deployed without testing? Maybe they do not have a procedure for testing before deployment or a guy overlooked it.
On 27 November 2017 at 17:02, geoffrey gitagia <ggitagia@gmail.com> wrote:
They added a new device that went live today.. Seems no one bothered to test first
On 27 Nov 2017 4:56 PM, "Odhiambo Washington" <odhiambo@gmail.com> wrote:
" is not permitted to\nrelay through this server without authentication.'"
(16:56:41 <~>) 0 $ dig -x 197.248.254.120 +short 197-248-254-120.safaricombusiness.co.ke.
Is that really their MX?
(16:56:57 <~>) 0 $ telnet 197.248.254.120 25 Trying 197.248.254.120... Connected to 197-248-254-120.safaricombusiness.co.ke. Escape character is '^]'. 220 rat01.safaricombusiness.co.ke ESMTP
Hmm... So they need to configure it with AUTH params. Maybe it's new students playing with server configs!
On 27 November 2017 at 16:50, geoffrey gitagia <ggitagia@gmail.com> wrote:
@Wash , the shocker is that this is when a client sends emails to me , i can send to outside domains very nicely , basically they've blocked their own MX servers from relaying mails to my server , and they're are the ones hosting all services in my domain.
On Mon, Nov 27, 2017 at 4:41 PM, Odhiambo Washington < odhiambo@gmail.com> wrote:
If they have decided to enforce AUTH for all relayed mail, it will be a challenge if you do not have the AUTH details. They probably published the information somewhere or they don't want any TDH relaying through their servers. Use your own SMTP Server sir.
On 27 November 2017 at 16:22, geoffrey gitagia via skunkworks < skunkworks@lists.my.co.ke> wrote:
> Hi Guys > > Anyone else affected by the below error > > > > ---------- Forwarded message ---------- > From: Mail Delivery System <MAILER-DAEMON@rat01.sa > faricombusiness.co.ke> > Date: Mon, Nov 27, 2017 at 3:47 PM > Subject: Delivery Status Notification (Failure) > To: ggitagia@gmail.com > > > The following message to <XXXXX@XXXXXXXXcom> was undeliverable. > The reason for the problem: > 5.1.0 - Unknown address error 550-'Please turn on SMTP > Authentication in your mail client. \n(rat01.safaricombusiness.co.ke) > [197.248.254.120]:42090 is not permitted to\nrelay through this server > without authentication.' > > Final-Recipient: rfc822;XXXXX@XXXXXXXXcom > Action: failed > Status: 5.0.0 (permanent failure) > Remote-MTA: dns; [197.248.5.12] > Diagnostic-Code: smtp; 5.1.0 - Unknown address error 550-'Please > turn on SMTP Authentication in your mail client. \n( > rat01.safaricombusiness.co.ke) [197.248.254.120]:42090 is not > permitted to\nrelay through this server without authentication.' (delivery > attempts: 0) > > -- > GG > > > _______________________________________________ > skunkworks mailing list > skunkworks@lists.my.co.ke > ------------ > List info, subscribe/unsubscribe > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > ------------ > > Skunkworks Rules > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > ------------ > Other services @ http://my.co.ke >
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
-- GG
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
-- GG
-- GG
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."

Summary is When you send emails to my domain , you get the error above , no configs have changed on my side but a new device has been added on safaricom side which is rat01.safaricombusiness.co.ke , and its the one not relaying emails to my email server. On Mon, Nov 27, 2017 at 5:02 PM, geoffrey gitagia <ggitagia@gmail.com> wrote:
They added a new device that went live today.. Seems no one bothered to test first
On 27 Nov 2017 4:56 PM, "Odhiambo Washington" <odhiambo@gmail.com> wrote:
" is not permitted to\nrelay through this server without authentication.'"
(16:56:41 <~>) 0 $ dig -x 197.248.254.120 +short 197-248-254-120.safaricombusiness.co.ke.
Is that really their MX?
(16:56:57 <~>) 0 $ telnet 197.248.254.120 25 Trying 197.248.254.120... Connected to 197-248-254-120.safaricombusiness.co.ke. Escape character is '^]'. 220 rat01.safaricombusiness.co.ke ESMTP
Hmm... So they need to configure it with AUTH params. Maybe it's new students playing with server configs!
On 27 November 2017 at 16:50, geoffrey gitagia <ggitagia@gmail.com> wrote:
@Wash , the shocker is that this is when a client sends emails to me , i can send to outside domains very nicely , basically they've blocked their own MX servers from relaying mails to my server , and they're are the ones hosting all services in my domain.
On Mon, Nov 27, 2017 at 4:41 PM, Odhiambo Washington <odhiambo@gmail.com> wrote:
If they have decided to enforce AUTH for all relayed mail, it will be a challenge if you do not have the AUTH details. They probably published the information somewhere or they don't want any TDH relaying through their servers. Use your own SMTP Server sir.
On 27 November 2017 at 16:22, geoffrey gitagia via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hi Guys
Anyone else affected by the below error
---------- Forwarded message ---------- From: Mail Delivery System <MAILER-DAEMON@rat01.safaricombusiness.co.ke
Date: Mon, Nov 27, 2017 at 3:47 PM Subject: Delivery Status Notification (Failure) To: ggitagia@gmail.com
The following message to <XXXXX@XXXXXXXXcom> was undeliverable. The reason for the problem: 5.1.0 - Unknown address error 550-'Please turn on SMTP Authentication in your mail client. \n(rat01.safaricombusiness.co.ke) [197.248.254.120]:42090 is not permitted to\nrelay through this server without authentication.'
Final-Recipient: rfc822;XXXXX@XXXXXXXXcom Action: failed Status: 5.0.0 (permanent failure) Remote-MTA: dns; [197.248.5.12] Diagnostic-Code: smtp; 5.1.0 - Unknown address error 550-'Please turn on SMTP Authentication in your mail client. \n( rat01.safaricombusiness.co.ke) [197.248.254.120]:42090 is not permitted to\nrelay through this server without authentication.' (delivery attempts: 0)
-- GG
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
-- GG
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
-- GG
participants (2)
-
geoffrey gitagia
-
Odhiambo Washington