Telegram-канал r_selfhosted - r/SelfHosted: Unsorted

r/SelfHosted

23 January 2026 10:09

Eliminate All Sorts of Spam with RspamD

So,

For a longer while i had websites being targeted with obvious trustpilot/seo/optimize email scams that just kept going and going and going. Even on one hour freshly raised domains they where able to find the email alias just like that to bombard with spam.

I was using RspamD but the lack of proper blocking kind of made me wonder, if i could customize it the way i want it. This trick will actively block any future of these BULLSHIT emails for you, your clients and much more.

First, you need RspamD. If it's setup and working, good. Here's the installation requirements through SSH:

mkdir -p /etc/rspamd/maps

nano /etc/rspamd/maps/blocked_keywords.map

Insert:

/you won (a|one) million/i

/work from home and earn/i

/crypto( )?giveaway/i

/urgent( )?invoice/i

# 2) Add multimap rules (subject + body)

Create or edit:

nano /etc/rspamd/local.d/multimap.conf

Add rules like these:

# Block by SUBJECT
BLOCKSUBJECTKEYWORDS {
type = "header";
header = "Subject";
map = "regexp;/etc/rspamd/maps/blockedkeywords.map";
prefilter = true;
action = "reject";
message = "Rejected: blocked subject keyword";
}

# Block by BODY (text parts)
BLOCKBODYKEYWORDS {
type = "content";
filter = "body"; # body/text extraction
map = "regexp;/etc/rspamd/maps/blockedkeywords.map";
prefilter = true;
action = "reject";
message = "Rejected: blocked body keyword";
}

Test/reload the stuff:

rspamadm configtest
systemctl reload rspamd 2>/dev/null || systemctl restart rspamd

Now start adding regex entries like these into, /etc/rspamd/maps/blocked_keywords.map:

/SEO-audit/i

/Website SEO/i

/mobile app/i

/Boost Brand Credibility/i

/google rankings/i

/SEO- en Google/i

/india/i

/positive response/i

/premium websites/i

/web development/i

/Send Proposal/i

/social media strategies/i

/service provider company/i

/buy reviews/i

/missing Google traffic/i

/𝐫𝐚𝐧𝐤/i

/free analysis report/i

/your details on Google/i

/page #1/i

/increase daily traffic/i

/business on Google/i

/customer inquiries/i

/Medical Apps/i

/Finance Apps/i

/Full Proposal/i

/Search Engine Optimization Service/i

/Google Submissions/i

/SEO Strategy/i

/seo\s+campaign/i

/graphic\s+design/i

/welcome\s+discount/i

/seo\s+work\s+scope/i

/on\s+sale/i

/hire\s+web\s+expert\.?/i

/(boost[\s\-_.]*engagement)/i

/(re:\s*forward)/i

/(free[\s\-_.]*analysis[\s\-_.]*report)/i

/(remove|delete|take\s*down|neutralize)\s+(unfair|misleading|harmful|negative)\s+reviews?/i

/(policy\s+violations?|violat(e|ing)\s+polic(y|ies))\s+.*\breviews?\b/i

/\bgenuine\b.*\bpositive\s+reviews?\b/i

/\bwell[-\s]*written\b.*\bpositive\s+reviews?\b/i

/\bstrengthen\b.*\b(profile|listing)\b.*\bpositive\s+reviews?\b/i

/\bprotect\b.*\b(reputation|business\s+image)\b.*\breviews?\b/i

/\breview\s+specialist\b/i

/\breputation\s+management\b.*\breviews?\b/i

/\boutsource\s+(your|the)\s+work\b/i

/\binterested\s+to\s+outsource\b/i

/\bwork\s+with\s+us\b.*\boutsource\b/i

/\bshare\s+your\s+(site|website)\b.*\b(requirements|requirement)\b/i

/\bso\s+that\s+we\s+can\s+discuss\s+further\b/i

/\bdigital\s+marketing\s+agency\b/i

/\b(website|web)\s+(design|development)\b.*\b(seo|smo|ppc)\b/i

/\bseo\b.*\bsmo\b.*\bppc\b/i

/\b(smo|ppc)\b.*\bseo\b/i

/\bproviding\s+services\s+like\b/i

#You can harden it through this for example:

/(graphic[\s\-_.]*design)/i

/(seo[\s\-_.]*campaign)/i

/(on[\s\-_.]*sale)/i

Restart, and watch the glory happen. You can finetune accordingly and watch the logs of what actually is being rejected. Spamassassin and such barely work because with newly created domains you can copy it all over the place which is not a ideal thing. Above works and instantly after they got Blocked messages they start to adept using AI. I'm actively blocking this through the use of such