mailcow/data/conf/rspamd/local.d/force_actions.conf

rules {
  DKIM_FAIL {
    action = "add header";
    expression = "R_DKIM_REJECT & !MAILLIST & !MAILCOW_WHITE & !MAILCOW_BLACK";
    require_action = ["no action", "greylist"];
  }
  VIRUS_FOUND {
    action = "reject";
    expression = "CLAM_VIRUS & !MAILCOW_WHITE";
    honor_action = ["reject"];
  }
}