AV-SPAM Rules

The AV-SPAM Rules page allows you to view, search, and manage Rspamd filtering rules at different scopes. This is an add-on feature of the AV-SPAM module.

The AV-SPAM Rules page is found under Server Management > AV-SPAM > Rules (or via the scope selector). It provides a centralized interface for reviewing the active rule sets that Rspamd uses to evaluate incoming mail.

At the top of the page, a Scope dropdown allows you to switch between:

• Server — View server-wide rules configured by the admin.
• Vsite — View virtual-site-specific rules (SiteAdmin scope).
• User — View user-specific rules (where configured).

The scope determines which rule set is displayed and which editing capabilities are available.

The rule table displays the following columns for each active rule:

• Symbol — The Rspamd symbol name (e.g., ``R_SPAMHAUS_SBL``, ``BAYES_SPAM``).
• Description — Human-readable description of what the rule checks.
• Group — The Rspamd group this rule belongs to (e.g., ``policies``, ``rbl``, ``headers``).
• Score — The score contribution when this rule triggers.
• Frequency — How often this rule has triggered in recent history.
• Hits — Total number of hits for this rule.

Rspamd rules fall into several categories:

These are the default rules shipped with Rspamd. They cover standard spam indicators:

• Header analysis
• Blacklist lookups (RBL, SURBL, URIBL)
• SPF / DKIM / DMARC verification
• URL reputation checks
• Statistical (Bayes) classification

Custom rules can be added through the AV-SPAM Settings page under the Custom Rules tab. Custom rules support:

• Multimap expressions — Match against headers, body, URLs, or sender attributes.
• SpamAssassin-style syntax — For compatibility with existing rule libraries.

• AV-SPAM Settings — Configure scoring, sender lists, GeoIP, and services
• AV-SPAM Stats — View filtering statistics and history