I have a Barracuda Spam Firewall 300 (firmware 4.0.1.009) implemented in my environment and Exchange 2007 sp1.
I'm working on an LDAP query in the Domain settings of the Barracuda to prevent the delivery of messages to disabled users.
I had found this ticket created around August that explains how to do it but unfortunately it didn't work for me.
Ticket: http://serverfault.com/questions/54442/ldap-query-for-barracuda/93384#93384
LDAP Query: (&((!userAccountControl:1.2.840.113556.1.4.803:=2)(|(sAMAccountName=${recipient_local_part})(proxyaddresses=smtp:${recipient_email})(mail=${recipient_email})(userPrincipalName=${recipient_local_part}))))
Actually the query works fine directly in the AD but it doesn't in the Barracuda. I suspect that the Barracuda doesn't support the 1.2.840.113556.1.4.803:=2 parameter in the query because when you get the error you can see the list of "supportedControl" like this line below and the 1.2.840.113556.1.4.803 is not listed at all, and when you take this parameter away the query works in the Barracuda.
LDAP BASE attribute: supportedControl=1.2.840.113556.1.4.801
Does anybody knows how do I create a LDAP query, that works in the Barracuda, to effectively filter out disabled accounts?
