IP access list...in or out?

amod_pandya

Hi all

i am confused on when to apply an access-list on the inside or outside of an interface? Are there any rules for it?

thanks in advance!

methoselah

take the perspective as if you're a little guy standing inside at the center of the router.

from there, decide if you want to block stuff going IN thru an interface, prohibiting them from reaching and going out any other interface, or

if you want to block stuff going OUT thru an interface, while letting them flow out of others.