fuzzy_check { min_bytes = 1k; # Since small parts and small attachments causes too many FP timeout = 2s; retransmits = 1; rule "rspamd.com" { algorithm = "mumhash"; servers = "round-robin:fuzzy1.rspamd.com:11335,fuzzy2.rspamd.com:11335"; encryption_key = "icy63itbhhni8bq15ntp5n5symuixf73s1kpjh6skaq4e7nx5fiy"; symbol = "FUZZY_UNKNOWN"; mime_types = ["*"]; max_score = 20.0; read_only = yes; skip_unknown = yes; short_text_direct_hash = true; # If less than min_length then use direct hash min_length = 64; # Minimum words count to consider shingles fuzzy_map = { FUZZY_DENIED { max_score = 20.0; flag = 1; } FUZZY_PROB { max_score = 10.0; flag = 2; } FUZZY_WHITE { max_score = 2.0; flag = 3; } } } # Include dynamic conf for the rule .include(try=true,priority=5) "${DBDIR}/dynamic/fuzzy_check.conf" }