fuzzy_check { min_bytes = 1k; # Since small parts and small attachments causes too many FP timeout = 2s; retransmits = 1; rule "rspamd.com" { algorithm = "mumhash"; servers = "round-robin:fuzzy1.rspamd.com:11335,fuzzy2.rspamd.com:11335"; encryption_key = "icy63itbhhni8bq15ntp5n5symuixf73s1kpjh6skaq4e7nx5fiy"; symbol = "RSPAMDCOM_FUZZY_UNKNOWN"; mime_types = ["*"]; max_score = 20.0; read_only = yes; skip_unknown = yes; short_text_direct_hash = true; # If less than min_length then use direct hash min_length = 64; # Minimum words count to consider shingles fuzzy_map = { RSPAMDCOM_FUZZY_DENIED { max_score = 20.0; flag = 1; } RSPAMDCOM_FUZZY_PROB { max_score = 10.0; flag = 2; } RSPAMDCOM_FUZZY_WHITE { max_score = 2.0; flag = 3; } } } rule "local" { algorithm = "mumhash"; servers = "localhost:7513"; symbol = "LOCAL_FUZZY_UNKNOWN"; mime_types = ["*"]; max_score = 20.0; read_only = no; skip_unknown = yes; short_text_direct_hash = true; # If less than min_length then use direct hash min_length = 64; # Minimum words count to consider shingles fuzzy_map = { LOCAL_FUZZY_DENIED { max_score = 20.0; flag = 1; } LOCAL_FUZZY_PROB { max_score = 10.0; flag = 2; } LOCAL_FUZZY_WHITE { max_score = 2.0; flag = 3; } } } }