docs/data/sbx_cli/sbx_policy_deny_network.yaml at e92bd0bfb4a8680e4663ddfe7eefd360442077cc · dvdksn/docs · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
name: sbx policy deny network
synopsis: Deny network access to specified hosts
description: |-
    Block sandbox network access to the specified hosts.

    RESOURCES is a comma-separated list of hostnames, domains, or IP addresses.
    Deny rules always take precedence over allow rules.

    The rule applies globally to all sandboxes by default. Use --sandbox to add
    the rule to policy "local" scoped to a single sandbox instead.
usage: sbx policy deny network [--sandbox SANDBOX] RESOURCES [flags]
options:
    - name: help
      shorthand: h
      default_value: "false"
      usage: help for network
    - name: sandbox
      usage: |
        Scope the rule to a specific sandbox (default: all sandboxes)
inherited_options:
    - name: debug
      shorthand: D
      default_value: "false"
      usage: Enable debug logging
example: |4-
      # Block access to a host (all sandboxes)
      sbx policy deny network ads.example.com

      # Block a host only for a specific sandbox
      sbx policy deny network --sandbox my-sandbox ads.example.com

      # Block all outbound traffic
      sbx policy deny network "**"
see_also:
    - sbx policy deny - Add a deny rule for sandboxes