#!/bin/bash

while read STREAM_FILE
do
    CLIENT_IP=`basename $STREAM_FILE | awk -F: '{ print $1 }'`
    HELO_CMD=`head -n 1 $STREAM_FILE | awk '{ print $1 }'`
    SENDER_DOMAIN=`grep -i "^MAIL FROM:" $STREAM_FILE | sed -r 's/^.*@(.*)>.*$/\1/g'`
    BY_STRING=`grep -E -o -h "by [0-9a-zA-z.-]+( \(.*\))?" $STREAM_FILE | head -n 1 | sed 's/by //g'`

    FINGERPRINT="$HELO_CMD $SENDER_DOMAIN $BY_STRING"

    if ! grep -F "$FINGERPRINT" "$CLIENT_IP" 2> /dev/null
    then
        echo "$FINGERPRINT" >> "$CLIENT_IP"
    fi

    rm $STREAM_FILE

done


