Phone Undelivered Mail – 552 MS-Office file containing VBA macros found inside of the email

It happens from time to time – a client gets an email rejected with a standard message,. the cause is anything but standard and takes ages to find.
In this case it is the SMTP settings on a Sonicwall UTM security appliance that does deep packet inspection on incoming SMTP traffic and detected MS Office Macros and decided to reject the email.

The recipient’s mailbox is full and can’t accept messages now. Microsoft Exchange will not try to redeliver this message for you. Please try resending this message later, or contact the recipient directly.


The NDR message also included #5.2.2 SMTP; 552 MS-Officefile containing VBA macros found inside of the email

This is the give away to check the Sonicwall

To remove the blocking of the email,  login to the Sonicwall appliance


– Check the Gateway AntiVirus Security Service under Security Services menu


– Click the SMTP settings button


– Remove all the check boxes in the window.
See the settings below.
If you still have issues we are happy to assist – call our Sonicwall experts on 1330 IT MEDIC
Captcha Capcha