Hello, I have some gear that needs a public ip, but does not have the best security profile, and I want to put up an ACL that only permits this gear to make outbound connections while dropping all inbound. My router is an ASR920 running IOS-XE 03.17.03.S. Does anyone have a simple copy/paste acl for this type of job? Thank you.