how are the rules applied to email flow?

are all the rules under the tabs "spam , malware , reputation " applied to inbound and outbound email flow , or just the rules choosen under the policy groups in the administration tab?