Comments on: ACLs… Closer to the Source or the Destination? https://www.practicalnetworking.net/series/access-lists/acls-closer-to-the-source-or-the-destination/ Networking presented simply, practically, and applicably Mon, 28 Sep 2026 08:22:28 +0000 hourly 1 By: Alice Diaz https://www.practicalnetworking.net/series/access-lists/acls-closer-to-the-source-or-the-destination/#comment-256229 Mon, 28 Sep 2026 08:22:28 +0000 https://www.practicalnetworking.net/?p=2729#comment-256229 Hey! This post really got me thinking about how ACLs can totally shape network security. I’ve always leaned towards source-based rules, but your insights on destination filtering made me rethink my approach. Have you tried any real-world applications that clarify which method is more effective? Also, speaking of clarity, have you checked out fnaf? It offers some cool resources for networking newbies!

]]> By: Redz hub free https://www.practicalnetworking.net/series/access-lists/acls-closer-to-the-source-or-the-destination/#comment-256070 Thu, 30 Jul 2026 10:56:54 +0000 https://www.practicalnetworking.net/?p=2729#comment-256070 Access Control Lists (ACLs) should be placed based on their type to maximize network efficiency and security. Standard ACLs are typically placed closer to the destination because they filter traffic only by source IP address, reducing the chance of blocking legitimate traffic unnecessarily. Extended ACLs, on the other hand, should be placed closer to the source since they can filter traffic based on source and destination IP addresses, protocols, and port numbers. Placing extended ACLs near the source prevents unwanted traffic from consuming network bandwidth, improves performance, and enhances overall security by stopping unauthorized traffic as early as possible.

]]> By: WiseAmberCedar https://www.practicalnetworking.net/series/access-lists/acls-closer-to-the-source-or-the-destination/#comment-256064 Wed, 29 Jul 2026 12:53:26 +0000 https://www.practicalnetworking.net/?p=2729#comment-256064 I’ve always leaned toward destination-side ACLs for simplicity, but the argument about source-side filtering cutting down on unwanted traffic across the network makes me reconsider. Doesn’t that shift also multiply the number of ACLs you have to maintain per source segment?

<a href=”https://nano-bananapro.com/
“>nano-bananapro</a>

]]>