Comment by genghisjahn

# Allow network access globally (all sandboxes) sbx policy allow network <domain>[,<domain>…]

# Remove a global network rule sbx policy rm network --resource <host>

# Remove a sandbox-specific network rule sbx policy rm network --sandbox <sandbox> --resource <host>