Hi @capote !
I also fight against rspamd lately. The good news is that I had some success.
First of all, whitelisting doesn’t work the way we think : some other rule might send emails to the junk folder anyway.
Could you share some examples of headers for false positive and false negative emails so that we can debug further ?
I personally encountered a case where I had to create an account at spamhaus and activate their Data Query Service (DQS) to improve the filter performance. See Rspamd DBL checks disabled because of the use of an open DNS?