Standard access lists should be applied closest to the destination.
Extended access lists should be applied closest to the source. 
The inbound or outbound interface should be referenced as if looking at the port from inside the router.
Statements are processed sequentially from the top of the list to the bottom until a match is found. If no match is found then the packet is denied, and discarded.
There is an implicit deny any at the end of all access lists. This will not appear in the configuration listing.
Access list entries should filter in the order from specific to general. Specific hosts should be denied first, and groups or general filters should come last.

equal (eq), not equal (neq), greater than (gt), and less than (lt).

Sta: 1-99 og 1300-1999
Ext: 100-199 og 2000-2699