how do we know what ACL configuration mean? an example
access-list 89 permit tcp host 192.168.10.2 any eq www? does this allow the traffic from the host 192.168.10.2 inside? i'm a bit confused. any help would be appreciated
That depends on how the ACL is applied to interfaces. In your case, you're probably right; but you should examine the rest of your config to be sure.
89: line number for editing or ACL name, depending on platform
permit: permit the following packets
tcp: packets need to contain TCP
host 192.168.10.2: single source address
any: destination address
eq www: qualifies the
anyfor destination port 80 (HTTP)
So, if this ACL entry (ACE) is applied ingress from the source address or egress towards the HTTP server(s) in question it permits the source to connect to and send a request to the web server.
You should examine the full ACL to make sense of it. Especially the implicit
deny any any at its end is very often overlooked.