Yes. I see that incoming mail is checked by drweb in the maillog. For example:
"scan: the message(drweb.tmp.B4D1pH) sent by
[email protected] is passed
PASS during call 'drweb' handler"
So it seems it IS working, but not generating a log file, and not sending email notifications.