rules {
  DKIM_FAIL {
    action = "add header";
    expression = "R_DKIM_REJECT & !MAILLIST & !MAILCOW_WHITE & !MAILCOW_BLACK";
    require_action = ["no action", "greylist"];
  }
}