mailcow/data/conf/rspamd/local.d/force_actions.conf

rules {
  DKIM_FAIL {
    action = "add header";
    expression = "R_DKIM_REJECT & !MAILLIST & !MAILCOW_WHITE & !MAILCOW_BLACK";
    require_action = ["no action", "greylist"];
  }
  VIRUS_FOUND {
    action = "reject";
    expression = "CLAM_VIRUS & !MAILCOW_WHITE";
    honor_action = ["reject"];
  }
  WHITELIST_FORWARDING_HOST_NO_REJECT {
    action = "add header";
    expression = "WHITELISTED_FWD_HOST";
    require_action = ["soft reject", "reject"];
  }
  WHITELIST_FORWARDING_HOST_NO_GREYLIST {
    action = "no action";
    expression = "WHITELISTED_FWD_HOST";
    require_action = ["greylist"];
  }
}