diff --git a/core/rspamd/conf/external_services_group.conf b/core/rspamd/conf/external_services_group.conf
new file mode 100644
index 00000000..bed44eea
--- /dev/null
+++ b/core/rspamd/conf/external_services_group.conf
@@ -0,0 +1,10 @@
+# local.d/external_services_group.conf
+
+description = "Oletools content rules";
+symbols = {
+  "OLETOOLS" {
+    weight = 1.0;
+    description = "OLETOOLS found a Macro";
+    one_shot = true;
+  },
+}