access-list [ normal | special ] listnumber1 { permit | deny } source-addr [ source-mask ]
access-list [ normal | special ] listnumber2 { permit | deny } protocol source-addr source-mask [ operator port1 [ port2 ] ] dest-addr dest-mask [ operator port1 [ port2 ] | icmp-type [ icmp-code ] ] [ log ]
no access-list { normal | special } { all | listnumber [ subitem ] }