[Esd-l] Have Updated Local Rules: Expected Behavior?

[Mike McCandless]

I updated my local rules (yesterday) almost verbatim from what the Web site
has.  I then received a number of email, in my OE inbox.  I've cut/paste the
text from one below.  Is this what should happen?  I thought the action of
DISCARD meant the messages hit the "bit bucket", or at least I'd never see
them in the inbox.

Return-Path: <mpphipps at novanthealth.org>
X-Original-To: michael at prismbiz.com
Delivered-To: michael at prismbiz.com
Received: from mail.bigfoot.com (unknown [211.115.216.222])
 by mail.prismbiz.com (Postfix) with SMTP id EEC711B80D
 for <michael at prismbiz.com>; Sun, 31 Aug 2003 07:17:19 -0400 (EDT)
Received: from OEMCOMPUTER ([24.88.201.39])
 by BFLITEMAIL-KR1.bigfoot.com (LiteMail v3.03(BFLITEMAIL-KR1)) with SMTP id
31Aug2003_BFLITEMAIL-KR1_125926_14782156;
 Sun, 31 Aug 2003 20:17:13 +0900 EST
From: <mpphipps at novanthealth.org>
To: <prism at bigfoot.com>
Subject: Thank you!
Date: Sun, 31 Aug 2003 7:16:55 --0400
X-MailScanner: Found to be clean
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
 boundary="_NextPart_000_02A9EC9F"
Message-Id: <20030831111719.EEC711B80D at mail.prismbiz.com>
X-Content-Security: [minnie.prismbiz.com] NONOTIFY
X-Content-Security: [minnie.prismbiz.com] DISCARD
X-Content-Security: [minnie.prismbiz.com] REPORT: Trapped SoBig.F worm -
http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.f@mm.html
X-Spam-Status: No, hits=4.8 required=10.0
 tests=DATE_IN_PAST_06_12,INVALID_DATE,MICROSOFT_EXECUTABLE,
       MISSING_MIMEOLE,NO_REAL_NAME,SPAM_PHRASE_00_01,
       USER_AGENT_OE
 version=2.41
X-Spam-Level: ****
Status:

This is a multipart message in MIME format

--_NextPart_000_02A9EC9F
Content-Type: text/plain;
 charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

See the attached file for details
--_NextPart_000_02A9EC9F
Content-Type: application/octet-stream;
 name="movie0045.pif"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
 filename="movie0045.pif"


-----------------------------------------------------------------
Mike McCandless
michael at prismbiz.com