From owner-freebsd-questions@FreeBSD.ORG  Fri Jun 12 23:54:31 2015
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@hub.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id B0E93DFD
 for <freebsd-questions@hub.freebsd.org>; Fri, 12 Jun 2015 23:54:31 +0000 (UTC)
 (envelope-from us.navy@outlook.com)
Received: from BAY004-OMC4S16.hotmail.com (bay004-omc4s16.hotmail.com
 [65.54.190.218])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits))
 (Client CN "*.outlook.com", Issuer "MSIT Machine Auth CA 2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 9D61D1BE
 for <freebsd-questions@freebsd.org>; Fri, 12 Jun 2015 23:54:31 +0000 (UTC)
 (envelope-from us.navy@outlook.com)
Received: from BAY182-W89 ([65.54.190.200]) by BAY004-OMC4S16.hotmail.com over
 TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751); 
 Fri, 12 Jun 2015 16:53:25 -0700
X-TMN: [VNQeF462Pvmo3VqxOUe1Dvk+Hi6zzDo3yCXImbuxROA=]
X-Originating-Email: [us.navy@outlook.com]
Message-ID: <BAY182-W89C2924F4BDF0D2BD3810DF4BB0@phx.gbl>
From: "Lt. Commander" <us.navy@outlook.com>
To: "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
CC: "sageame@sageweb.net" <sageame@sageweb.net>
Subject: Script question
Date: Fri, 12 Jun 2015 18:53:25 -0500
Importance: Normal
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginalArrivalTime: 12 Jun 2015 23:53:26.0018 (UTC)
 FILETIME=[F939DE20:01D0A56A]
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Jun 2015 23:54:31 -0000

Am running fbsd-9.3 and sendmail-8.15 plus spamassassin.=0A=
=0A=
I would like to be able to scan the daily maillog with a script at midnight=
 to extract a list by selecting spam recognized and contained using the con=
stant "score=3D(greater than x) and from that a list of just the IPs which =
will be placed in a spam file as part of a spam system here. Am tired of so=
me getting past spamass even though it exceeds a reasonable tag level.=0A=
=0A=
I do know how to extract just the IP from a line in the log=2C but not sure=
 what the syntax should be to first ID the "score=3D<x" in a simple sh shel=
l script.=0A=
=0A=
I hope this has been presented clear enough to gather some help on this tas=
k.=0A=
=0A=
Thanks=2C=0A=
Jason 		 	   		  =