white/blacklist using rspamd matches against "smtp from" only
I'am not sure how this is handled when using amavis, but in rspamd the generated config matches against the "smtp from" - instead of the "header from".
Althought this might be more precise, a lot of end users don't even have knowledge of the smtp from/return-path header and in times of SRS it's pretty much impossible to get a match when not using regex matching anyway.
Furthermore there is no guarantee that "smtp from" and the "header from" are equal or even using the same domain. Hence the black/whitelisting might not have the desired effect from the end user perspective.
proposed fix
Since no "or" matching is available in rspamd (at least not between different attributes), a second stanza matching the from header could be introduced:
header = { "From" = "sender@domain.tld"; }