# Mounted into the sidecar as /etc/rspamd/local.d/multimap.conf.
#
# The allow and deny lists kept in the panel (Inbound > Filter lists). SelfPost
# writes them as six files under data/antispam/, which the fragment mounts at
# /etc/rspamd/selfpost; rspamd rereads a file when it changes, no restart.
#
# Deny wins over allow, whichever entries match. A denied sender is refused
# before anything else is looked at (a prefilter). An allowed one is not
# accepted outright - rspamd would then let whichever of the two rules ran
# first decide - but given a weight no spam score outweighs, which a refusal
# by the deny list still overrides.
#
# A domain entry is that domain, not its subdomains.
#
# SelfPost counts how often an entry decided a message by what these rules
# leave behind: the deny message below and the names of the allow symbols.
# Change either and Inbound > Filter lists shows "never" for every entry.

SELFPOST_DENY_IP {
  type = "ip";
  map = "/etc/rspamd/selfpost/deny_ip.map";
  prefilter = true;
  action = "reject";
  message = "Refused by this server's deny list";
  description = "Client address on the deny list";
}
SELFPOST_DENY_FROM {
  type = "from";
  map = "/etc/rspamd/selfpost/deny_from.map";
  prefilter = true;
  action = "reject";
  message = "Refused by this server's deny list";
  description = "Sender address on the deny list";
}
SELFPOST_DENY_DOMAIN {
  type = "from";
  filter = "email:domain";
  map = "/etc/rspamd/selfpost/deny_domain.map";
  prefilter = true;
  action = "reject";
  message = "Refused by this server's deny list";
  description = "Sender domain on the deny list";
}

SELFPOST_ALLOW_IP {
  type = "ip";
  map = "/etc/rspamd/selfpost/allow_ip.map";
  score = -100.0;
  description = "Client address on the allow list";
}
SELFPOST_ALLOW_FROM {
  type = "from";
  map = "/etc/rspamd/selfpost/allow_from.map";
  score = -100.0;
  description = "Sender address on the allow list";
}
SELFPOST_ALLOW_DOMAIN {
  type = "from";
  filter = "email:domain";
  map = "/etc/rspamd/selfpost/allow_domain.map";
  score = -100.0;
  description = "Sender domain on the allow list";
}