outbound {
  priority = high;
  ip_map = "/etc/rspamd/local.d/local_networks.map";
  apply {
    symbols_disabled = ["GPT_CHECK"];
  }
}
inbound {
  priority = high;
  ip_map = "/etc/rspamd/local.d/local_networks.map";
  inverse = true;
  apply {
    symbols_disabled = ["DKIM_SIGNED"];
    # Tag only; reject stays defined (unreachable by score) so ClamAV's virus reject still applies.
    actions {
      reject = 1000;
    }
  }
}