#!/bin/sh

logf='/var/log/nginx/access.log'
cache='/tmp/forumspam_cache'

install -m 600 /dev/null $cache

tail -F $logf | while read line ; do
	case $line in (*"POST"*)
		ip=`echo $line | awk '{print $1}'`
		if ! grep -q $ip $cache; then
			echo $ip >> $cache
			/usr/local/bin/forumspam.sh "$ip"
		fi
	esac
done