Many types of access lists are available in Cisco IOS Software for many different protocols. See Table 9-1 for a complete list.
You are permitted one access list per protocol, per interface, per direction.
At the end of every access list is an implied deny-all-traffic access control entry (ACE). Therefore, if a packet does not match any of your criteria statements, it is blocked.
Remember that the order of access ...