Licson Lee says to YSITD ip access-list extended Block-Incoming-TCP permit tcp any any established permit udp any any permit icmp any any echo-reply deny ip any any