CitrixPot: NetScaler / Citrix ADC Gateway honeypot (initial public release)

deploy/decoy-relay.service

@@ -0,0 +1,18 @@
+[Unit]
+Description=Disposable guest transparent TCP and DNS relay
+After=network-online.target
+[Service]
+User=decoy-relay
+ExecStart=/usr/bin/python3 /opt/decoy/network_capture.py --role relay --listen 127.0.0.1 --port 15001 --broker 10.0.2.100 --broker-port 19090 --dns-port 53
+Restart=on-failure
+AmbientCapabilities=CAP_NET_BIND_SERVICE
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+RestrictAddressFamilies=AF_INET AF_UNIX
+MemoryMax=256M
+TasksMax=128
+[Install]
+WantedBy=multi-user.target