sandbox: Allow DirPortFrontPage unconditionally if it's set

fixes 12114; bug not in any release.

Improves fix for 12028
sandbox: permit listen(2)

Fix for 12115; bugfix on 0.2.5.1-alpha