[Zeek] No emails are received

[Carlos Lopez]

Hi all,

 Is it a bug or a misconfigruation?

Regards,
C. L. Martinez


________________________________________
From: Carlos Lopez <clopmz at outlook.com>
Sent: 27 February 2020 09:48
To: zeek at zeek.org
Subject: No emails are received

Hi all,

 After re-installing my Zeek hosts to version 3.0.2 in my home lab, I haven't received any mail from cron task or any process/alert related to Zeek. But I see some emails queued in /var/zeek/spool/tmp directory like this:

-rw-r--r--. 1 zeek idps 296 Feb 27 07:30 mail.1493.tmp

 With the following content:

From: admin.zeek at domain.org
Subject: [Zeek] cron: expire-logs failed
To: myadmin at otherdomain.org
User-Agent: ZeekControl 2.0.0

expire-logs failed
expire-logs: directory not found: /var/zeek/logs/stats

creating directory for stats file: /var/zeek/logs/stats

--
[Automatically generated.]

 In /var/log/maillog, there is an error when Zeek tries to send any email:

Feb 26 09:20:07 aberdeen postfix/sendmail[21353]: fatal: zeek(994): No recipient addresses found in message header
Feb 26 13:10:07 aberdeen postfix/sendmail[27852]: fatal: zeek(994): No recipient addresses found in message header
Feb 26 13:20:08 aberdeen postfix/sendmail[27999]: fatal: zeek(994): No recipient addresses found in message header
Feb 26 16:40:08 aberdeen postfix/sendmail[718]: fatal: zeek(994): No recipient addresses found in message header
Feb 26 17:00:08 aberdeen postfix/sendmail[1529]: fatal: zeek(994): No recipient addresses found in message header
Feb 26 17:30:07 aberdeen postfix/sendmail[1968]: fatal: zeek(994): No recipient addresses found in message header
Feb 26 17:50:07 aberdeen postfix/sendmail[2261]: fatal: zeek(994): No recipient addresses found in message header

 Options MailTo = and  MailFrom = contain the values indicated in the mail I have shown.

 Is this a bug? In previous versions I didn't have this problem.

Regards,
C. L. Martinez