---
title: 'OLEVBMacro Settings'
url: 'https://docs.danami.com/warden/settings/antispam/plugin-settings/olevbmacro'
markdown: 'https://docs.danami.com/warden/settings/antispam/plugin-settings/olevbmacro.md'
date: '2026-09-22'
description: 'This plugin uses several methods to search attached documents for evidence of an OLE Macro. OLEMacro max mime parts - olemacro_num_mime The maximum number of matching MIME parts the plugin will scan. Default: 5 OLEMacro max zip members - olemacro_num_zip The maximum number of matching zip members t…'
taxonomy:
  category:
    - docs
  tag:
    - olevbmacro
---

[](#)  [ Basics ](https://docs.danami.com/warden/)     [ Settings ](https://docs.danami.com/warden/settings)     [ Antispam ](https://docs.danami.com/warden/settings/antispam)     [ Plugin Settings ](https://docs.danami.com/warden/settings/antispam/plugin-settings)      OLEVBMacro Settings    

# OLEVBMacro Settings

This plugin uses several methods to search attached documents for evidence of an OLE Macro.

**OLEMacro max mime parts** - `olemacro_num_mime`
The maximum number of matching MIME parts the plugin will scan.
Default: 5

**OLEMacro max zip members** - `olemacro_num_zip`
The maximum number of matching zip members the plugin will scan.
Default: 8

**OLEMacro max zip depth** - `olemacro_zip_depth`
The max depth to recurse within zip files.
Default: 2

**OLEMacro extended scan** - `olemacro_extended_scan`
Scan more files for potential macros, olemacro\_skip\_exts still honored. This is off by default and should not be needed. If this is turned on consider adjusting values for `olemacro_num_mime` and `olemacro_num_zip` and prepare for more CPU overhead.
Default: 0

**OLEMacro prefer content-disposition** - `olemacro_prefer_contentdisposition`
The content-disposition header filename be preferred if ambiguity is encountered whilst trying to get filename.
Default: 1

**OLEMacro max file size** - `olemacro_max_file`
The largest file that the plugin will decode from the MIME objects.
Default: 1024000

**OLEMacro scan extensions** - `olemacro_exts`
The extensions the plugin targets for macro scanning.
Default: (?:doc|docx|dot|pot|ppa|pps|ppt|rtf|sldm|xl|xla|xls|xlsx|xlt|xslb)$

**OLEMacro macro extensions** - `olemacro_macro_exts`
The extensions the plugin treats as containing a macro.
Default: (?:docm|dotm|ppam|potm|ppst|ppsm|pptm|sldm|xlm|xlam|xlsb|xlsm|xltm|xps)$

**OLEMacro zips** - `olemacro_zips`
The extensions for the plugin to target as zip files.
Default: (?:zip)$

**OLEMacro skip extensions** - `olemacro_skip_exts`
The extensions for the plugin to skip entirely, these should only be guaranteed macro free files.
Default: (?:dotx|potx|ppsx|pptx|sldx|xltx)$

**OLEMacro skip ctypes** - `olemacro_skip_ctypes`
The Configure types for the plugin to skip entirely, these should only be guaranteed macro free.
Default: ^(?:text\\/)

## Related Pages

- [OLEVBMacro](https://docs.danami.com/warden/user-guide/antispam-plugins/olevbmacro "OLEVBMacro")

 [ ](https://docs.danami.com/warden/command-line-interface/antispam/antispam-plugin-olevbmacro)

---

## Navigation

- Parent: [Plugin Settings](https://docs.danami.com/warden/settings/antispam/plugin-settings.md)
- Previous: [NeuralNetwork Settings](https://docs.danami.com/warden/settings/antispam/plugin-settings/neuralnetwork.md)
- Next: [Phishing Settings](https://docs.danami.com/warden/settings/antispam/plugin-settings/phishing.md)