Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a Barracuda Spam Firewall 300 (firmware implemented in my environment and Exchange 2007 sp1.

I'm working on an LDAP query in the Domain settings of the Barracuda to prevent the delivery of messages to disabled users.

I had found this ticket created around August that explains how to do it but unfortunately it didn't work for me.

Ticket: http://serverfault.com/questions/54442/ldap-query-for-barracuda/93384#93384

LDAP Query: (&((!userAccountControl:1.2.840.113556.1.4.803:=2)(|(sAMAccountName=${recipient_local_part})(proxyaddresses=smtp:${recipient_email})(mail=${recipient_email})(userPrincipalName=${recipient_local_part}))))

Actually the query works fine directly in the AD but it doesn't in the Barracuda. I suspect that the Barracuda doesn't support the 1.2.840.113556.1.4.803:=2 parameter in the query because when you get the error you can see the list of "supportedControl" like this line below and the 1.2.840.113556.1.4.803 is not listed at all, and when you take this parameter away the query works in the Barracuda.

LDAP BASE attribute: supportedControl=1.2.840.113556.1.4.801

Does anybody knows how do I create a LDAP query, that works in the Barracuda, to effectively filter out disabled accounts?

share|improve this question
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.