How to selectively sync Distribution Lists and Security Groups from an Active Directory source

Use the Optional LDAP Query Filter on the Source tab.

To pull only Distribution Groups, enter the following on the line for Groups:
(sAMAccountType=268435457)

To pull only Security Groups, enter the following on the line for Groups:
(!(sAMAccountType=268435457))