The specification says in "40. CONTENT SCANNING":
| The following scanner types are supported in this release:
|
| [ ... ]
|
| . "clamd": This daemon-type scanner is GPL and free. You can get it at
| http://www.clamav.net/. Clamd does not seem to unpack MIME containers, so
| it is recommended to unpack MIME attachments in the MIME ACL. It takes
| one option: either the path and name of a UNIX socket file, or a hostname
| or IP number, and a port, separated by space, as in the second of these
| examples:
"clamd" unpacks if you have "ScanMail" enabled in your "clamd.conf" file.
I've tested this and it works without "demime" prior to "malware".
Just my 0.01 ___.
--Frank Elsner