Consider running clamav-milter as well as MIMEDefang's built-in clamav support. They parse things slightly different ways.
I thought md_copy_orig_msg_to_work_dir_as_mbox_file() took care of that by sending the raw message *and* all the MD-parsed parts to the virus scanner.
Also, if you have clamav-milter first in your milter list, many viruses will be caught by clamav-milter before they hit MIMEDefang (at least, the DATA filter parts.) This will free up a comparatively large MIMEDefang thread for scanning other email that didn't get caught by clamav-milter.
That, on the other hand, sounds like it could be useful, if you get a lot of virus traffic.
-- Kelson Vibber SpeedGate Communications <www.speed.net> _______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

