diff --git a/core/rspamd/conf/force_actions.conf b/core/rspamd/conf/force_actions.conf
new file mode 100644
index 00000000..64c992c4
--- /dev/null
+++ b/core/rspamd/conf/force_actions.conf
@@ -0,0 +1,7 @@
+rules {
+  WHITELIST_EXCEPTION {
+    action = "reject";
+    expression = "(AUTH_NA|BLACKLIST_ANTISPOOF) & IS_LOCAL_DOMAIN";
+    message = "Rejected (anti-spoofing)";
+  }
+}
diff --git a/core/rspamd/conf/multimap.conf b/core/rspamd/conf/multimap.conf
new file mode 100644
index 00000000..dd2ffa61
--- /dev/null
+++ b/core/rspamd/conf/multimap.conf
@@ -0,0 +1,5 @@
+IS_LOCAL_DOMAIN {
+  type = "from";
+  filter = "email:domain";
+  map = "http://{{ ADMIN_ADDRESS }}/internal/rspamd/local_domains";
+}