CWrazor-check - Razor Filtering Agent

    razor-check [options]  [ mail1 [ mail2 .. ] ]

    $ cat mbox | razor-check
    $ razor-check ./mbox
    $ razor-check -d mbox mail.1 mail.2 mail.3

CWrazor-check checks a mail against the distributed Razor Catalogue by communicating with a Razor Catalogue Server. It should be invoked before the mail is delivered or processed by a human. CWrazor-check terminates with exit value CW0 if the signature for the mail is catalogued on the server (spam) or CW1 if the mail is not catalogued by the server (not a spam). CWrazor-check should be invoked against every incoming mail by mail processors (like procmail) or MTAs (like sendmail). An alternate method would be to call CWrazor-check from cron, at regular intervals, to identify and mark spam in queued mailboxes.

If CWrazor-check is passed more than one mail, it will check each against the database, printing out the serial number of every mail considered to be spam. CWrazor-check supports mbox-formatted files with 1 or more mails in them as well as files containing a single RFC 822 (non-mbox) mail. More than one file may be present on the command line, can be either a non-mbox or mbox in any order. However, more than one non-mbox mail cannot be read from stdin.

CWrazor-check is usually run by piping the contents of the mail to it, or by providing the name of the file that contains the mail message to be checked as the last argument. CWrazor-check takes the following arguments: Print a usage message and exit. Print the version number and exit. Print debugging information. Set debug level to 'n'. Default is 3 without CW-d option, 9 with. Specify file to use for whitelisting. Overrides 'whitelist' option in CWrazor-agent.conf. Simulate a check. Do everything except talk to the server. Specifies an alternate configuration file. If not specified, it is computed, see razor-agents(1) manpage for details. See razor-agent.conf(5) manpage for various configuration options. The default is CW<razorhome>/razor-agent.conf. Specify razorhome directory. This is where the configuration file, logfiles, identities, and server files live. If not specified, it is computed, see razor-agents(1) manpage for details. Specify file to log to instead of what is in the configuration file. The default is CW<razorhome>/razor-agent.log. Use this Razor Catalogue Server instead of reading CWservers.catalogue.lst. Compute and print the signature of the mail contents and exit. If CW-e=integer is not specified, all supported engines will be used. Accept a list of pre-computed (with CW-H) signatures on the command line, instead of computing one from mail content. Signatures can be submitted in hex or base64, but base64 is preferred. Requires CW-e=integer. Usage: CWrazor-report -e 1 -S a8a3d545adb73f9733675571ffeaf10cba87745b Specify engine used to create signatures. Must be 1, 2, 3, or 4 in this version. Engine 1, or CW-e=1, is used for Razor 1.x signatures. Used only with CW-S=string or CW-H. String used by engine 4 when computing signatures. Published by the Razor Catalogue Servers and updated very frequently. Used only when CW-e=4.

CWrazor-check is usually invoked from procmail(1). Here are some common ways of using it with procmail:

    :0 Wc
    | razor-check
    :0 Waf
    | formail -i "Subject: Razor Warning: SPAM/UBE/UCE"

    :0 Wc
    | razor-check
    :0 Waf
    | formail -A "X-Razor2-Warning: SPAM."

To file spam in a mailbox

    :0 Wc
    | razor-check
    :0 Wa
    /home/foo/Mail/razor-caught

Vipul Ved Prakash <mail@vipul.net>, and Chad Norwood <chad@samo.org>

razor-agents(1), razor-agent.conf(5), razor-admin(1), razor-report(1), razor-revoke(1), razor-whitelist(5)

This is free software, distributed under the ARTISTIC license.