CitrixPot: NetScaler / Citrix ADC Gateway honeypot (initial public release)

deploy/decoy-network.service

@@ -0,0 +1,21 @@
+[Unit]
+Description=External recording and policy relay for disposable execution VM
+After=network-online.target
+[Service]
+ExecStart=/usr/bin/python3 /opt/decoy/network_capture.py --role broker --quota-mib 2048 --listen 0.0.0.0 --port 19090 --evidence /var/lib/decoy/network --peers /var/lib/decoy/allowed-peers.json
+WorkingDirectory=/opt/decoy
+UMask=0077
+Restart=no
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ReadWritePaths=/var/lib/decoy
+ProtectHome=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
+MemoryMax=384M
+TasksMax=128
+[Install]
+WantedBy=multi-user.target