mail_get_sender_ip.sh: find (probably) original sender IP based on mail header

This commit is contained in:
Oliver Ladner 2017-01-12 21:47:27 +01:00
commit 635ba3e91b

10
mail_get_sender_ip.sh Executable file
View file

@ -0,0 +1,10 @@
#!/usr/bin/env bash
#
# Extracts the IP address from the first 'Received:' header
dir="$1"
if [ -z $dir ]; then
echo "Usage: $(basename $0) <path-to-mailbox>"
exit 1
fi
for spammail in $(find "$dir" -type f); do grep '^Received:' $spammail | tail -1; done | grep -Eo '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}'