hi, I'm looking for any operational feedback on filtering ACLs (turbo/sequenced/racl/cbac/named/time-based) for reasons of security. I'm interested in the manageability aspect of ACLs on network border such as CPE/IX/uplinks. What specific ACL(s) do you folks use to manage rules on your box(es)? Any feedback is welcome/appreciated! regards, /virendra