Forgot this

core/rspamd/conf/external_services_group.conf

@@ -0,0 +1,10 @@
+# local.d/external_services_group.conf
+
+description = "Oletools content rules";
+symbols = {
+  "OLETOOLS" {
+    weight = 1.0;
+    description = "OLETOOLS found a Macro";
+    one_shot = true;
+  },
+}