diff --git a/docker/sandbox.sb b/docker/sandbox.sb
index 36ffd05b..3373908d 100644
--- a/docker/sandbox.sb
+++ b/docker/sandbox.sb
@@ -77,6 +77,7 @@
 (allow network-outbound
     (path "/private/var/run/mDNSResponder")
     (remote tcp4 "*:443")
+    (remote tcp4 "*:3128")
 )
 
 ; Open VSCode window