[{"_1":2,"_165":-5,"_166":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_140":141},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":-5,"_85":86,"_131":-5,"_132":11,"_133":17,"_134":11,"_135":-5,"_136":11,"_137":-5,"_138":139},"canonicalUrl","https://hub.docker.com/r/eilandert/rspamd-dcc-razor-pyzor/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","eilandert","reponame","rspamd-dcc-razor-pyzor","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":-5,"_57":58,"_59":58,"_60":61,"_62":-5,"_63":64,"_65":66,"_67":11,"_68":29,"_69":70,"_75":11,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2026-06-14T18:48:00.026844Z","description","","is_private","last_updated","2026-09-21T11:02:46.816843Z","last_modified","2026-07-03T11:13:40.945385Z","media_types",[52],"application/vnd.oci.image.index.v1+json","name","pull_count",5074,"repository_type","star_count",1,"status","status_description","active","source","collaborator_count",0,"full_description","# rspamd-dcc-razor-pyzor\n\n> A small, standalone Docker backend that brings the three classic\n> collaborative-filtering networks — **DCC**, **Razor** and **Pyzor** — to\n> [rspamd](https://rspamd.com) through one HTTP endpoint, plus the rspamd plugin\n> that talks to it.\n\nThe image runs **no rspamd of its own**. Your rspamd stays in its own container\n(or on the host); you drop the plugin shipped here into it and point the plugin\nat this backend.\n\n**Why a separate backend?** rspamd has a built-in DCC module but nothing for\nRazor or Pyzor, and shelling out to those CLIs from inside the rspamd worker would\nblock its event loop. This service is a single static Go binary that speaks **all\nthree networks in-process** — Razor, Pyzor and DCC via the\n[gazor](https://github.com/eilandert/gazor),\n[gyzor](https://github.com/eilandert/gyzor) and\n[gdcc](https://github.com/eilandert/gdcc) libraries — answering over HTTP, so the\nplugin stays fully asynchronous, one request covers all three networks at once,\nand there are **no per-message subprocess forks at all**.\n\n## How it works\n\n```\n ┌─────────────────────┐ HTTP :8077 + token ┌──────────────────────────────┐\n │ rspamd (your image) │ ──── POST /check ───► │ gozer (distroless, nonroot)│\n │ dcc_razor_pyzor.lua │ │ ├─ gdcc (DCC, in-proc) │\n │ │ ◄─── JSON verdict ─── │ ├─ gazor (Razor, in-proc) │\n │ │ │ └─ gyzor (Pyzor, in-proc) │\n └─────────────────────┘ └──────────────────────────────┘\n```\n\nThe image is a single ~6 MB static `gozer` binary on a `distroless/static`\nbase — no Debian, no s6 supervisor, no shell, no per-message fork. `gozer` is the\ncontainer entrypoint and runs as `nonroot`. Its source lives in its own repo,\n[eilandert/gozer](https://github.com/eilandert/gozer), pulled in here as the\n`docker/gozer` submodule and compiled by this repo's image build. It queries the\nthree networks **concurrently**, all in-process, and caches verdicts (see\n[Configuration](#configuration)). All three talk to their servers directly (DCC\nneeds no `dccifd` daemon). Every backend is **best-effort**: if one network is\nunreachable it simply doesn't score, and the container stays healthy — the\nhealthcheck only depends on gozer's `/health` (probed by `gozer health`, since the\nimage ships no shell or curl).\n\n**Hardening:** gozer runs non-root with bounded concurrency, every POST is\n**token-authenticated**, and the bundled compose runs the container read-only with\n`cap_drop: ALL`, `no-new-privileges`, and no published host port.\n\n### Privacy: the message never touches disk\n\nGozer keeps the message in memory: all three checksums (Razor, Pyzor and DCC) are\ncomputed in-process — nothing is ever written to a temp file. The cache stores\nonly `sha256(body) → verdict` (never the body itself), and the same goes for the\noptional Redis backend, so no message content is ever persisted locally.\n\n(This is also why a `tmpfs` overlay would do nothing for speed: there is no\nper-message disk write to accelerate. The latency is **network** round-trips to\nthe DCC/Razor/Pyzor servers.)\n\nThe only thing that leaves the container is what collaborative filtering needs:\n**content fingerprints** — DCC checksums, Razor signatures, Pyzor digests — sent\nto those networks (and, on `/report`, a spam submission). The raw message is never\nuploaded.\n\n## Quick start\n\n### 1. Run the backend\n\nGozer rejects every POST until a token is configured, and it isn't published to\nthe host — so run it with compose:\n\n```bash\ncd docker\nmkdir -p secrets && openssl rand -hex 32 > secrets/drp_token.txt\ndocker compose up -d # docker/docker-compose.yml\n```\n\nContainers on the same Docker network now reach it at `http://rspamd-drp:8077`.\nGive your rspamd (and Dovecot) the same token.\n\n### 2. Install the plugin into rspamd\n\nThe plugin lives in [`rspamd/`](rspamd/) at the repo root (it is **not** baked into\nthe backend image):\n\n```bash\ncp rspamd/plugins/dcc_razor_pyzor.lua /etc/rspamd/plugins/\ncp rspamd/local.d/dcc_razor_pyzor.conf /etc/rspamd/local.d/\ncp rspamd/local.d/groups.conf /etc/rspamd/local.d/ # symbol scores\necho 'dofile(\"/etc/rspamd/plugins/dcc_razor_pyzor.lua\")' >> /etc/rspamd/rspamd.local.lua\n```\n\nThen set the backend URL and the **same token** in `local.d/dcc_razor_pyzor.conf`:\n\n```\nurl = \"http://rspamd-drp:8077/check\"; # backend host:port\ntoken = \"the-shared-secret\"; # must equal gozer's GOZER_TOKEN\n```\n\n> **Heads-up on DNS:** rspamd resolves URLs through its own configured resolver.\n> If that resolver can't see Docker service names (for example an RBL-only\n> unbound), use the backend's **IP address** in `url` instead of `rspamd-drp`.\n\nRestart rspamd. The plugin adds three symbols, scored in `groups.conf` (tune to\ntaste):\n\n| Symbol | Meaning |\n|--------|---------|\n| `DRP_DCC_BULK` | DCC reports the body as bulk |\n| `DRP_RAZOR` | Razor signature match |\n| `DRP_PYZOR` | Pyzor sightings above threshold |\n\n## Identities\n\nAnonymous works for every network and is the default. The image carries **no\nwritable state**, so nothing persists between restarts unless you mount it. To use\na **known or shared identity**, supply it as below — Razor and DCC take\ncredentials from the environment (every var also accepts a `_FILE` form for\nDocker secrets), Pyzor reads a standard `accounts` file:\n\n| Network | How to authenticate | Anonymous default |\n|---------|---------------------|-------------------|\n| Razor | `RAZOR_USER` + `RAZOR_PASS` (or `_FILE`); obtain one with `gozer razor-register` | yes |\n| DCC | `DCC_CLIENT_ID` + `DCC_CLIENT_PASSWD` (or `_FILE`), or `DCC_IDS`; persist with `gozer dcc-register` | yes (id 1) |\n| Pyzor | mount a pyzor **`accounts` file** at `$PYZOR_HOME/accounts` — see below; generate with `gozer pyzor-register` | yes |\n\n```yaml\nenvironment:\n DCC_CLIENT_ID: \"1234567\"\n DCC_CLIENT_PASSWD: \"…\" # or DCC_IDS: \n RAZOR_USER: \"you@example.com\" # obtain one with `gozer razor-register`\n RAZOR_PASS: \"…\"\n```\n\nThe `gozer *-register` subcommands persist a credential to the file the matching\nnetwork loads it from **and** print it as bare `KEY=value` env lines, so you can\nfeed it back through the environment instead of mounting a file. The image\nentrypoint is `gozer serve`, so override it to run a register subcommand:\n\n```bash\ndocker compose run --rm --entrypoint /usr/local/bin/gozer rspamd-drp \\\n pyzor-register --user you@example.com | grep '^GYZOR_' > pyzor.env\n# likewise: razor-register --user … --pass … | dcc-register --client-id … --passwd …\n```\n\nSee the [gozer README](https://github.com/eilandert/gozer#registering-identities)\nfor all the flags.\n\n**Pyzor authentication.** Unlike Razor and DCC, Pyzor has no credential env var —\nthe in-process gyzor client loads accounts the reference-pyzor way, from an\n`accounts` file in its home dir (`PYZOR_HOME`, default `/var/lib/pyzor`). Mount one\nread-only; this works even with the container's `read_only: true` rootfs:\n\n```yaml\nenvironment:\n PYZOR_HOME: /var/lib/pyzor # default; shown for clarity\nvolumes:\n - ./pyzor-accounts:/var/lib/pyzor/accounts:ro\n```\n\n```\n# ./pyzor-accounts — one line per server: host : port : username : salt,key\npublic.pyzor.org : 24441 : you@example.com : 0123abcd,4567ef89…\n```\n\nGenerate the `salt,key` with `gozer pyzor-register` (or the stock `pyzor` tool);\ngyzor consumes it byte-for-byte. With no accounts file the Pyzor client is\nanonymous to the public server, which suits most setups.\n\n### DNS-bypass server overrides\n\nWhen the container's DNS is flaky or the public discovery servers are unreachable,\npin each network's server list explicitly, bypassing DNS discovery entirely. Gozer\nforwards these to the matching in-process client (`gdcc`, `gyzor`, `gazor`); each\naccepts a comma list of `host[:port]` (hostname, IPv4, or bracketed IPv6\n`[::1]:port`):\n\n```yaml\nenvironment:\n DCC_SERVERS: \"dcc1.dcc-servers.net,dcc2.dcc-servers.net\" # → gdcc\n GYZOR_SERVERS: \"public.pyzor.org:24441\" # → gyzor (Pyzor)\n GAZOR_DISCOVERY: \"discovery.razor.cloudmark.com\" # → gazor (Razor), tried in order\n```\n\nResolution order per network: **explicit env → persisted identity file →\nanonymous**. For Razor that means `RAZOR_USER`+`RAZOR_PASS` win, else the\n`gazor-identity` file under `RAZORHOME` (if you mounted one); for Pyzor, the\nmounted `accounts` file, else anonymous. Credential variables also accept a\n`_FILE` form for Docker secrets — e.g.\n`RAZOR_PASS_FILE=/run/secrets/razor_pass` — so a secret never has to sit in the\ncompose file.\n\n## Configuration\n\nEvery setting is a backend-container **environment variable** and also a\n**`gozer serve` CLI flag** (flag > env > default), so the same option works in\ncompose or on the command line. The flag name is the env name lower-cased,\nde-prefixed and hyphenated — e.g. `GOZER_MAX_CONCURRENT` ↔ `--max-concurrent`,\n`GYZOR_SERVERS` ↔ `--pyzor-servers`. The full env/flag table and HTTP API are in\nthe [gozer README](https://github.com/eilandert/gozer#configuration); the\ncompose-relevant subset is below.\n\n| Variable | Default | Purpose |\n|----------|---------|---------|\n| `GOZER_TOKEN` / `GOZER_TOKEN_FILE` | — | Shared secret for POST auth. **Required** — without it every POST returns 503. |\n| `GOZER_HOST` / `GOZER_PORT` | `0.0.0.0` / `8077` | Bind address. |\n| `GOZER_CACHE_TTL` | `300` | Verdict cache lifetime in seconds (`0` disables). Bulk mail repeats, so cache hits are the main speed-up. |\n| `GOZER_CACHE_SIZE` | `4096` | In-memory cache entries (LRU). |\n| `GOZER_REDIS_URL` | — | Use Redis for the cache so **multiple scanners share** it, e.g. `redis://valkey:6379/5`. Otherwise the cache is in-process. |\n| `GOZER_REDIS_PREFIX` | `drp:check:` | Key prefix in Redis. |\n| `GOZER_MAX_CONCURRENT` | `8` | Max in-flight requests (bounds backend fan-out). |\n| `GOZER_BACKEND_TIMEOUT` | `6` | Per-backend timeout in seconds. |\n| `GOZER_VERBOSE` | `0` (off) | Per-request logging — access line plus verdict, timing and cache hit/miss; also dumps the resolved config at startup. Off by default (only startup and errors are logged). |\n| `GOZER_LOG_STDOUT` | `0` (off) | Send **info/access** logs to stdout instead of stderr. **Errors and warnings always stay on stderr** so a log shipper can separate and alert on them. Both streams are captured by Docker regardless. |\n| `RAZOR_MIN_CF` | `ac` | Razor minimum confidence: `ac`, `ac+N`, `ac-N`, or a number. |\n| `DCC_SERVERS` / `GYZOR_SERVERS` / `GAZOR_DISCOVERY` | — | DNS-bypass server overrides forwarded to gdcc / gyzor / gazor (see above). |\n| `TZ` | — | Container timezone. |\n\n## Benchmarks\n\nFrom `go test -bench` (Go 1.26, 32-core host); reproduce with the commands shown.\n\n**Request path / throughput** — `go test -bench BenchmarkServe ./internal/gozer`\ndrives the full server (auth, concurrency gate, cache, single-flight, dispatch)\nagainst a 2 ms synthetic backend, over a mixed cache-hit ratio:\n\n| cache hit ratio | throughput | backend calls / request |\n|-----------------|-----------:|------------------------:|\n| 90 % | ~29,600 msg/s | 0.11 |\n| 50 % | ~11,500 msg/s | 0.53 |\n| 0 % (all miss) | ~11,800 msg/s | 1.01 |\n\nThe verdict cache is the lever: at a 90 % hit ratio only ~1 request in 9 reaches a\nbackend, and gozer clears 1000 msg/s comfortably even all-miss. The in-process\ncache hit itself is **~55 ns, zero allocations**; an at-capacity LRU insert is\n~344 ns.\n\n**Fingerprint compute** (offline, one 256 KiB message) — the in-process CPU cost\nper network, all dwarfed by network RTT:\n\n| client | per message | allocations |\n|--------|------------:|------------:|\n| gdcc — DCC checksums | ~3.2 ms (81 MB/s) | 24 |\n| gyzor — Pyzor digest | ~4.5 ms (58 MB/s) | 50 |\n| gazor — Razor signatures | ~8.4 ms (31 MB/s) | 833 |\n\n**Network round-trips dominate the cold path** (anonymous, public servers, varies\nwith distance): Pyzor ~50 ms, DCC ~170 ms, Razor ~1 s (multi-step discovery\nhandshake). gozer queries all three **concurrently, in-process**, so a cold\n`/check` ≈ the slowest backend (Razor), not the sum — and a cached `/check` is a\nsub-millisecond local lookup.\n\n## HTTP API\n\nThe request body is always the raw RFC-822 message. POST endpoints require the\ntoken, sent as `Authorization: Bearer ` or `X-DRP-Token: ` (`401` if\nit's wrong, `503` if gozer has no token). `/health` needs no auth.\n\n- **`POST /check`** — query only, never reports. Used by the rspamd plugin.\n\n ```json\n { \"dcc\": { \"action\": \"reject\", \"bulk\": 2147483647 },\n \"razor\": { \"hit\": true },\n \"pyzor\": { \"count\": 42, \"wl\": 0 } }\n ```\n\n- **`POST /report`** — report the message as **spam** to all three networks.\n\n ```json\n { \"dcc\": true, \"razor\": true, \"pyzor\": true }\n ```\n\n- **`POST /revoke`** — report as **ham**. Razor and Pyzor support this; DCC has no\n network un-report, so its value is `null`.\n\n- **`GET /health`** — `200 ok`, used by the container healthcheck.\n\n- **`GET /metrics`** — Prometheus exposition (no auth): per-endpoint request\n counters (`gozer_check_total`, `gozer_report_total`, `gozer_revoke_total`),\n `gozer_error_total`, `gozer_busy_total`, cache hit/miss/coalesced, Redis health\n (`gozer_redis_error_total`, `gozer_redis_circuit_open_total`), per-backend errors\n (`gozer_backend_error_total{backend=\"dcc|razor|pyzor\"}`) and a\n `gozer_latency_seconds` histogram. `gozer stats` fetches and prints it locally\n (the image ships no curl).\n\n### Example\n\nPOST the raw message as the body — `--data-binary` keeps the bytes intact (the\nfingerprints are computed over them). From a container on the same network (or the\nhost if you published the port):\n\n```sh\nTOKEN=$(cat docker/secrets/drp_token.txt)\n\n# scan\ncurl -s --data-binary @message.eml \\\n -H \"Authorization: Bearer $TOKEN\" http://rspamd-drp:8077/check\n# {\"dcc\":{\"action\":\"unknown\",\"bulk\":null},\"razor\":{\"hit\":false},\"pyzor\":{\"count\":42,\"wl\":0}}\n\n# user feedback (X-DRP-Token works in place of the Bearer header)\ncurl -s --data-binary @spam.eml -H \"X-DRP-Token: $TOKEN\" http://rspamd-drp:8077/report\ncurl -s --data-binary @ham.eml -H \"X-DRP-Token: $TOKEN\" http://rspamd-drp:8077/revoke\ncurl -s http://rspamd-drp:8077/metrics # no auth\n```\n\n## Reporting from Dovecot (sieve)\n\n`/check` is for scanning. `/report` and `/revoke` are for **user feedback** — when\nsomeone moves a message into Junk (spam) or rescues it back out (ham). Sieve can't\nspeak HTTP, so [`dovecot/drp-report`](dovecot/drp-report) bridges the message to\ngozer, triggered by imapsieve.\n\nThe [`eilandert/dovecot`](https://github.com/eilandert/dockerized) image already\nbakes this in. To wire it into **any other** Dovecot host (needs `curl` and\n`dovecot-sieve`):\n\n```bash\ncp dovecot/drp-report /usr/lib/dovecot/sieve-pipe/drp-report # chmod 0755\ncp dovecot/sieve/report-spam.sieve /usr/lib/dovecot/sieve/\ncp dovecot/sieve/report-ham.sieve /usr/lib/dovecot/sieve/\nsievec /usr/lib/dovecot/sieve/report-spam.sieve\nsievec /usr/lib/dovecot/sieve/report-ham.sieve\ncp dovecot/90-drp-sieve.conf /etc/dovecot/conf.d/\n\n# sieve_extprograms scrubs the environment, so pass the URL + token via a file:\nprintf 'DRP_URL=http://rspamd-drp:8077\\nDRP_TOKEN=the-shared-secret\\n' \\\n > /etc/dovecot/drp.env\n\ndoveadm reload\n```\n\nWhat it does ([`90-drp-sieve.conf`](dovecot/90-drp-sieve.conf)):\n\n| User action (IMAP) | Sieve script | Gozer call |\n|--------------------|--------------|-----------|\n| move/copy **into** `Junk` | `report-spam.sieve` | `POST /report` (spam) |\n| move **out of** `Junk` | `report-ham.sieve` | `POST /revoke` (ham) |\n\n`drp-report` always exits 0, so a reporting hiccup never bounces mail or blocks the\nIMAP move.\n\n## Build\n\n```bash\ndocker build -f docker/Dockerfile-deb -t eilandert/rspamd-dcc-razor-pyzor:latest docker/\n```\n\nIn the [dockerized](https://github.com/eilandert/dockerized) monorepo this repo is\na submodule at `src/rspamd-dcc-razor-pyzor`; build it with\n`docker buildx bake debian-rspamd-drp`.\n\n> **Packages:** none. The runtime is `distroless/static` plus the single static\n> `gozer` binary — no Debian, no apt, no perl/python, no `dcc` package\n> (dccproc/cdcc), no shell. All three clients are linked in.\n\n## The Go rewrite: gazor, gyzor, gdcc, gozer\n\nEarlier versions of this backend were a thin Python HTTP shim that, for every\nmessage, forked the perl `razor-check` / `razor-report`, the python `pyzor` and the\n`dccproc` CLIs. That meant an interpreter (and a set-UID `dccproc`) start per check\nand a perl + python + dcc toolchain baked into the image. All three clients were\nrewritten from scratch in Go and are now linked into the backend in-process:\n\n| Was (per-message fork) | Now (in-process Go) | What it is |\n|------------------------|---------------------|------------|\n| perl `razor-agents` (Razor2) | [gazor](https://github.com/eilandert/gazor) | Go razor client |\n| python `pyzor` | [gyzor](https://github.com/eilandert/gyzor) | Go pyzor client |\n| set-UID `dccproc` (dcc package) | [gdcc](https://github.com/eilandert/gdcc) | Go DCC client |\n| python `spamcheck_shim.py` | **gozer** | this backend — the binary in the image |\n\ngazor, gyzor and gdcc speak their wire protocols byte-for-byte compatibly with the\nreference perl/python/C clients (each is gated by parity tests against real razor,\npyzor and `dccproc` in its own CI), so the servers see identical fingerprints and\nthe switch is invisible on the wire. With **no per-message fork left**, the image\ndropped from ~268 MB (perl/python/dcc + s6 on Debian) to a **~6 MB distroless\nstatic binary**.\n\nUpgrading from an older build: the backend's environment variables were renamed\n`SHIM_*` to `GOZER_*` (for example `SHIM_TOKEN` becomes `GOZER_TOKEN`). The HTTP\ncontract, the `X-DRP-*` headers, and `drp-report`'s `DRP_URL` / `DRP_TOKEN` are\nunchanged.\n\n## See also\n\n- Docker Hub: \n- Monorepo: \n- Article: \n- gozer (the backend binary — its own repo, here as the `docker/gozer` submodule): \n- gazor (Razor client, imported in-process): \n- gyzor (Pyzor client, imported in-process): \n- gdcc (DCC client, imported in-process): \n\n## License\n\nMIT — see [LICENSE](LICENSE).","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",523894225,"orgData","recentTags",[87,125],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_97":98,"_46":114,"_115":90,"_116":29,"_117":52,"_53":118,"_119":120,"_121":105,"_122":114,"_123":61,"_124":17},"content_type","creator",9766429,"digest","sha256:533f965016be19cd3a8ee16cbf4d613950fe94911c348ecdd524abeabfc0f177","full_size",4602890,"id",1199206279,"images",[99],{"_100":101,"_91":102,"_103":44,"_104":105,"_106":107,"_108":109,"_110":44,"_111":-5,"_112":94,"_59":61,"_113":-5},"architecture","amd64","sha256:c133ba7de0df84f16bc8a8d10352b4ce8f1d4061ac1dec7a1e2ffa9d9e27fff4","features","last_pulled","2026-09-21T20:22:48.185588287Z","last_pushed","2026-09-21T11:02:42.732045509Z","os","linux","os_features","os_version","size","variant","2026-09-21T11:02:46.503297Z","last_updater","last_updater_username","media_type","latest","repository",31458650,"tag_last_pulled","tag_last_pushed","tag_status","v2",{"_88":40,"_89":90,"_91":92,"_93":94,"_95":126,"_97":127,"_46":129,"_115":90,"_116":29,"_117":52,"_53":130,"_119":120,"_121":105,"_122":129,"_123":61,"_124":17},1199206252,[128],{"_100":101,"_91":102,"_103":44,"_104":105,"_106":107,"_108":109,"_110":44,"_111":-5,"_112":94,"_59":61,"_113":-5},"2026-09-21T11:02:44.096244Z","debian","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":142,"_149":150,"_138":163,"_164":11},{"_36":143,"_38":144,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":145,"_53":31,"_28":29,"_54":55,"_56":-5,"_57":58,"_59":58,"_60":61,"_62":-5,"_63":64,"_65":66,"_67":11,"_68":29,"_69":146,"_75":11,"_76":148,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":147},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_151":152,"_153":-5,"_154":-5,"_155":156},"count",2,"next","previous","results",[157,160],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_97":158,"_46":114,"_115":90,"_116":29,"_117":52,"_53":118,"_119":120,"_121":105,"_122":114,"_123":61,"_124":17},[159],{"_100":101,"_91":102,"_103":44,"_104":105,"_106":107,"_108":109,"_110":44,"_111":-5,"_112":94,"_59":61,"_113":-5},{"_88":40,"_89":90,"_91":92,"_93":94,"_95":126,"_97":161,"_46":129,"_115":90,"_116":29,"_117":52,"_53":130,"_119":120,"_121":105,"_122":129,"_123":61,"_124":17},[162],{"_100":101,"_91":102,"_103":44,"_104":105,"_106":107,"_108":109,"_110":44,"_111":-5,"_112":94,"_59":61,"_113":-5},[],"canDeleteTags","actionData","errors"]

eilandert/rspamd-dcc-razor-pyzor

Tags for eilandert/rspamd-dcc-razor-pyzor