Rspamd Many "bad search filter: top" messages

[MrE (Enrique D)]

Thank you @mrmarkuz

Found it in the file “etc/rspamd/local.d/multimap.conf”, there I created the template that you suggest in a post:

Blocking email at the tld

I wikified it, should be possible now. To block tlds: Create a custom template: mkdir -p /etc/e-smith/templates-custom/etc/rspamd/local.d/multimap.conf Create /etc/e-smith/templates-custom/etc/rspamd/local.d/multimap.conf/90tld with following content: # # configure tld list # { if ($rspamd{SpamCheckStatus} eq 'enabled') { $OUT .= << 'EOF' FROM_BLACKLIST_TLD { type = "from"; map = [ "${CONFDIR}/blacklist_from_tld.map", ]; action = "reject"; filter = "top"; symb…

And it’s working great, with those messages mentioned.

Reading the docs, I don’t know which type and/or filter to change it for, I found several options.
How to correct it without losing this protection?

#
# configure tld list
#

FROM_BLACKLIST_TLD { #change to SOMETHING_BLACKLIST_TLD ?
    type = "from"; # change to: "helo" or "hostname" ?
    map = [
    "${CONFDIR}/blacklist_from_tld.map", #blacklist_something_tld.map ?
    ];
    action = "reject";
    filter = "top";
    symbol = "FROM_BLACKLIST_TLD"; # SOMETHING_BLACKLIST_TLD ?
    regexp = true;
    description = "Refused list of FROM TLD";

It’s an idea, and I could be very wrong:

FIXED_BLACKLIST_TLD {
    type = "helo";  # or "hostname" ?
    map = [
    "${CONFDIR}/blacklist_fixed_tld.map",
    ];
    action = "reject";
    filter = "top";
    symbol = "FIXED_BLACKLIST_TLD";
    regexp = true;
    description = "Refused list of FIXED TLD";
}

Reading all the configured maps and documents, I’m already getting an idea but I can’t find the correct solution.

Regards