Any Suggestions to harden my browser sandbox?

I am wondering if anyone can give me some suggestion to harden my firefox sandbox thanks Malwar. I am using Windows XP SP3 32-bit, I also use sandboxie(free) 4.06 32-bit.

Sandboxie(free) 4.06 browser Config: [DefaultBox]

ConfigLevel=7
AutoRecover=y
Template=BlockPorts
Template=LingerPrograms
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
RecoverFolder=%Personal%
RecoverFolder=%Favorites%
RecoverFolder=%Desktop%
BorderColor=#00FF00
Enabled=y
BoxNameTitle=n
NotifyInternetAccessDenied=y
NotifyStartRunAccessDenied=y
NeverDelete=n
AutoDelete=y
DropAdminRights=y
ProcessGroup=<StartRunAccess>,firefox.exe
ProcessGroup=<InternetAccess>,firefox.exe
ClosedFilePath=%Personal%\My Downloads\
ClosedFilePath=%Personal%\My Music\
ClosedFilePath=%Personal%\My Pictures\
ClosedFilePath=%My Video%\
ClosedFilePath=\Device\Mup\
ClosedFilePath=C:\WINDOWS\system\
ClosedFilePath=C:\WINDOWS\system32\kernel32.dll
ClosedFilePath=C:\WINDOWS\system32\t2embed.dll
ClosedFilePath=C:\WINDOWS\system32\win32k.sys
ClosedFilePath=!<InternetAccess>,InternetAccessDevices
ClosedIpcPath=!<StartRunAccess>,*

 

Hey Malwar, I think its pretty tight already. No need to tighten it anymore. Actually, I think you can loosen it up some to make it more comfortable and convenient. For example, if I was you, I would allow Bookmarks to be saved out of the sandbox and would allow Plugin container Start/Run access so you can play Flash videos. If you don't play Flash videos or have disabled Plugin container then there's no need for you to do that.

Bo

 

Yeah thanks for the information. I just watch them on my laptop.

 

You can further increase security of your sandbox by running the whole sandbox thing inside a Ram Disk, and it speeds things substantially.

Here is a good explanation how to go about it using a Ram Drive

https://www.wilderssecurity.com/showthread.php?t=355016

and maybe read this post I wrote it explains how to harden sandboxie
https://www.wilderssecurity.com/showpost.php?p=2297072&postcount=55

 

I have further increased the security of this sandbox by disabling recovery and blocking access to the system 32 drivers folder and set a password and only administrators can make changes.