Sandboxie works as a Firewall?

[Franklin]

Came across this tip over at Sandboxie's forum and it seems to work ok in blocking leaktest.exe.
-{ Quote: "
SnDPhoenix:

Ok, nice idea, I'll start this off with a little tweak that we all (well some of us) just learned a couple days ago.

By adding to your ini file:
Code:
ClosedFilePath=!iexplore.exe,\Device\Afd*

You can block internet access for all programs sandboxed except for IE, (of course you could replace iexplore with whatever the name of your browsers executable is e.g Opera.exe, firefox.exe, etc..)" }-
SB Thread (http://www.sandboxie.com/phpbb/viewtopic.php?t=1903)

[Ilya Rabinovich]

SnDPhoenix forgot about \Device\Tcp, \Device\Udp and \Device\RawIp

[Franklin]

Thanks for that Ilya.:)

Not not that I really understand much about these sorts of things as you fellas are utter geniusses and way beyond anything I know.8)

[Franklin]

Well it seems SnDPhoenix knew exactly what you meant.

Not only have I rid myself of blacklists I may even be able to get rid of my firewall for outbounds as I have a hardware firewall!;)
-{ Quote: "SnDPhoenix:
To add onto the "block internet command" i posted, you can also deny some other network related resources such as:
\Device\Tcp, \Device\Udp and \Device\RawIp, so in other words you could also add to your ini:

ClosedFilePath=!iexplore.exe,\Device\Tcp
ClosedFilePath=!iexplore.exe,\Device\Udp
ClosedFilePath=!iexplore.exe,\Device\RawIp

and it should make it that much more secure (thanks to Ilya for reminding me of those)" }-

[Rasheed187]

What I don´t understand is why some people are already saying they will dump their firewall because of this, seems a bit silly to me, I mean, this setting only controls sandboxed processes. And a standalone firewall will do the exact same thing anyways.

[Franklin]

PC Tools firewall is gone from here Rasheed as I have a hardware firewall.

All I needed was outbounds for MS phoning home and running media player sandboxed stops as such.

Tried those 19 leaktests and Sandboxie with the extra ini settings seemed to contain all of them.

http://www.firewallleaktester.com/