Block Port

This feature was removed since v0.9.0 / 5.51.0. If you have custom BlockPort entries in your Sandboxie Ini, they will need to be updated by hand to the new format, so for example BlockPort=137,138,139,445 becomes NetworkAccess=*,Block;Port=137,138,139,445 (currently included in the Templates.ini file under the [Template_BlockPorts] section).

BlockPort was a sandbox setting in Sandboxie Ini. It specified IP port numbers to block for outgoing communications.

Usage:

   .
   .
   .
   [DefaultBox]
   BlockPort=137-139,445
   BlockPort=*,80,8080

The port numbers listed above are associated with the SMB/CIFS network file sharing subsystem.

The primary purpose of this setting is to block outgoing communications on SMB/CIFS ports, in order to prevent a rogue sandboxed program from accessing files through the SMB/CIFS subsystem, rather than by issuing direct requests to the local system.

The setting can be specified repeatedly over multiple lines and the effects will accumulate. Port ranges may be specified as shown in the first example. The second example shows negated use: Block all ports except those specified following the asterisk (star) character.

This setting is not configurable through Sandboxie Control, except to enable or disable a pre-defined list of default blocked ports:

Sandbox Settings > Applications > Miscellaneous > Default list of blocked TCP/IP ports

Note that this setting will prevent programs such as smbclient from properly running under Sandboxie. In case this is required, the setting can be turned off.