aliases

support:  "|/var/scripts/my_script.py

Basic email parsing from postfix alias

#!/usr/bin/env python

import email
import sys


def walk(stdin_data):
    """Prepend alert to all parts of the message."""
    root_message = email.message_from_string(stdin_data)
    f = open('/tmp/ids_logs.txt', 'a')
    if root_message.is_multipart():
        for payload in root_message.get_payload():
            # if payload.is_multipart(): ...
            f.write(str(payload.get_payload()))
            f.write('\nif\n')
    else:
        f.write(str(root_message.get_payload()))
        f.write('\nelse\n')

    email_header = root_message.walk().next()
    f.write(str(email_header['Subject']))
    f.write(str(email_header['From']))
    f.close()


def main():
    stdin_data = sys.stdin.read()
    walk(stdin_data)

if __name__ == '__main__':
    main()