rspamd/conf/modules.conf

# Rspamd modules configuration
fuzzy_check {
    min_bytes = 300;
	rule {
		servers = "highsecure.ru:11335";
		symbol = "FUZZY_UNKNOWN";
		mime_types = "application/pdf";
		max_score = 20.0;
		read_only = yes;
		skip_unknown = yes;
		fuzzy_map = {
			FUZZY_DENIED {
				max_score = 20.0;
				flag = 1
			}
			FUZZY_PROB {
				max_score = 10.0;
				flag = 2
			}
			FUZZY_WHITE {
				max_score = 2.0;
				flag = 3
			}
		}
	}
}
forged_recipients {
    symbol_sender = "FORGED_SENDER";
    symbol_rcpt = "FORGED_RECIPIENTS";
}
maillist {
    symbol = "MAILLIST";
}
surbl {
    whitelist = "file://$CONFDIR/surbl-whitelist.inc";
    exceptions = "file://$CONFDIR/2tld.inc";

    rule {
        suffix = "multi.surbl.org";
        symbol = "SURBL_MULTI";
        bits {
            JP_SURBL_MULTI = 64;
            AB_SURBL_MULTI = 32;
            MW_SURBL_MULTI = 16;
            PH_SURBL_MULTI = 8;
            WS_SURBL_MULTI = 4;
            SC_SURBL_MULTI = 2;
        }
    }
    rule {
        suffix = "multi.uribl.com";
        symbol = "URIBL_MULTI";
        bits {
            URIBL_BLACK = 2;
            URIBL_GREY = 4;
            URIBL_RED = 8;
        }
    }
    rule {
        suffix = "uribl.rambler.ru";
        symbol = "RAMBLER_URIBL";
    }
    rule {
        suffix = "dbl.spamhaus.org";
        symbol = "DBL";
        options = "noip";
    }
    rule {
        suffix = "uribl.spameatingmonkey.net";
        symbol = "SEM_URIBL_UNKNOWN";
        bits {
            SEM_URIBL = 2;
        }
        options = "noip";
    }
    rule {
        suffix = "fresh15.spameatingmonkey.net";
        symbol = "SEM_URIBL_FRESH15_UNKNOWN";
        bits {
            SEM_URIBL_FRESH15 = 2;
        }
        options = "noip";
    }
}
rbl {

 default_from = true;
 default_received = false;
 default_exclude_users = true;

 private_ips = "127.0.0.0/8 10.0.0.0/8 192.168.0.0/16 169.254.0.0/16 172.16.0.0/12 100.64.0.0/10 fc00::/7 fe80::/10 fec0::/10 ::1";

 rbls {
	
    spamhaus {
        symbol = "RBL_SPAMHAUS";
        rbl = "zen.spamhaus.org";
        ipv6 = true;
        returncodes {
            RBL_SPAMHAUS_SBL = "127.0.0.2";
            RBL_SPAMHAUS_CSS = "127.0.0.3";
            RBL_SPAMHAUS_XBL = "127.0.0.4";
            RBL_SPAMHAUS_XBL = "127.0.0.5";
            RBL_SPAMHAUS_XBL = "127.0.0.6";
            RBL_SPAMHAUS_XBL = "127.0.0.7";
            RBL_SPAMHAUS_PBL = "127.0.0.10";
            RBL_SPAMHAUS_PBL = "127.0.0.11";
        }
    }

    spamhaus_xbl {
       symbol = "RECEIVED_SPAMHAUS_XBL";
       rbl = "xbl.spamhaus.org";
       ipv6 = true;
       received = true;
       from = false;
    }
    
    spamhaus_swl {
        symbol = "RWL_SPAMHAUS_WL";
        rbl = "swl.spamhaus.org";
        ipv6 = true;
        returncodes {
            RWL_SPAMHAUS_WL_IND = "127.0.2.2";
            RWL_SPAMHAUS_WL_TRANS = "127.0.2.3";
            RWL_SPAMHAUS_WL_IND_EXP = "127.0.2.102";
            RWL_SPAMHAUS_WL_TRANS_EXP = "127.0.2.103";
        }
    }

    mailspike {
       symbol = "RBL_MAILSPIKE";
       rbl = "rep.mailspike.net";
         returncodes {
            #http://mailspike.net/usage.html
            RBL_MAILSPIKE_WORST = "127.0.0.10"
            RBL_MAILSPIKE_VERYBAD = "127.0.0.11"
            RBL_MAILSPIKE_BAD = "127.0.0.12"
            RBL_MAILSPIKE_SUSP = "127.0.0.13"
            RBL_MAILSPIKE_PROB = "127.0.0.14"
            RWL_MAILSPIKE_POSSIBLE = "127.0.0.17"
            RWL_MAILSPIKE_GOOD = "127.0.0.18"
            RWL_MAILSPIKE_VERYGOOD = "127.0.0.19"
            RWL_MAILSPIKE_EXCELLENT = "127.0.0.20"
         }
    }
    
    senderscore {
       symbol = "RBL_SENDERSCORE";
       rbl = "bl.score.senderscore.com";
    }
    
    abusech {
       symbol = "RBL_ABUSECH";
       rbl = "spam.abuse.ch";
    }
    
    uceprotect1 {
       symbol = "RBL_UCEPROTECT_LEVEL1";
       rbl = "dnsbl-1.uceprotect.net";
    }
    
    sorbs {
       symbol = "RBL_SORBS";
       rbl = "dnsbl.sorbs.net";
       returncodes {
            #http://www.sorbs.net/general/using.shtml
            RBL_SORBS_HTTP = "127.0.0.2"
            RBL_SORBS_SOCKS = "127.0.0.3"
            RBL_SORBS_MISC = "127.0.0.4"
            RBL_SORBS_SMTP = "127.0.0.5"
            RBL_SORBS_RECENT = "127.0.0.6"
            RBL_SORBS_WEB = "127.0.0.7"
            RBL_SORBS_DUL = "127.0.0.10"
            RBL_SORBS_BLOCK = "127.0.0.8"
            RBL_SORBS_ZOMBIE = "127.0.0.9"
       }
    }
    
    sem {
        symbol = "RBL_SEM";
        rbl = "bl.spameatingmonkey.net";
    }
    
    semIPv6 {
        symbol = "RBL_SEM_IPV6";
        rbl = "bl.ipv6.spameatingmonkey.net";
        ipv4 = false;
        ipv6 = true;
    }

    dnswl {
        symbol = "RCVD_IN_DNSWL";
        rbl = "list.dnswl.org";
        ipv6 = true;
        returncodes {
            RCVD_IN_DNSWL_NONE = "127.0.%d+.0";
            RCVD_IN_DNSWL_LOW = "127.0.%d+.1";
            RCVD_IN_DNSWL_MED = "127.0.%d+.2";
            RCVD_IN_DNSWL_HI  = "127.0.%d+.3";
            DNSWL_BLOCKED = "127.0.0.255";
        }
    }

    rambleremails {
        symbol = RAMBLER_EMAILBL;
        rbl = email-bl.rambler.ru;
        from = false;
        emails = true;
        exclude_users = false;
        exclude_private_ips = false;
        exclude_local = false;
    }

 }
}

chartable {
    threshold = 0.300000;
    symbol = "R_MIXED_CHARSET";
}
once_received {
    good_host = "mail";
    bad_host = "static";
    bad_host = "dynamic";
    symbol_strict = "ONCE_RECEIVED_STRICT";
    symbol = "ONCE_RECEIVED";
}

#multimap {
#}

phishing {
    symbol = "PHISHING";
}
#emails {
#}
spf {
    spf_cache_size = 2k;
    spf_cache_expire = 1d;
}
dkim {
    dkim_cache_size = 2k;
    dkim_cache_expire = 1d;
    time_jitter = 6h;
    trusted_only = false;
    skip_multi = false;
}

ratelimit {
    limit = "to:100:0.033333333";
    limit = "to_ip:30:0.025";
    limit = "to_ip_from:20:0.01666666667";
    limit = "bounce_to:10:0.000555556";
    limit = "bounce_to_ip:5:0.000277778";
    limit = "user:20:0.01666666667";
    whitelisted_rcpts = "postmaster,mailer-daemon";
    max_rcpt = 5;
}

regexp {
    max_size = 1M;
}

ip_score {
#	servers = "localhost";
#   treshold = 100;
#   reject_score = 3;
#   no_action_score = -2;
#   add_header_score = 1;
#   whitelist = "file:///ip_map";
}

hfilter {
    helo_enabled = true;
    hostname_enabled = true;
    url_enabled = true;
    from_enabled = true;
    rcpt_enabled = true;
    mid_enabled = true;
    rcpt_enabled = true;
}