Sandbox IronPython?

Is it possible to run an IronPython interpreter inside my .Net application, but inside a sandbox? I want to 开发者_StackOverflow中文版deny the IP script access to the filesystem while still allowing the app itself access.

Would this involve running the scripting engine in a second AppDomain? How would I handcuff it so it can't do whatever it pleases?

Here's an article explaining how to create an AppDomain and execute code in a sandbox. Just create the AppDomain and handcuff the code that runs inside it.