Editing Access-control list (section)

=== Networking ACLs ===
On some types of proprietary computer hardware (in particular, [[router (computing)|routers]] and [[Network switch|switches]]), an access-control list provides rules that are applied to [[Port (computer networking)|port numbers]] or [[IP address]]es that are available on a [[server (computing)|host]] or other [[Network Layer|layer&nbsp;3]], each with a list of hosts and/or networks permitted to use the service. Although it is additionally possible to configure access-control lists based on network [[domain name]]s, this is a questionable idea because individual [[Transmission Control Protocol|TCP]], [[User Datagram Protocol|UDP]], and [[Internet Control Message Protocol|ICMP]] headers do not contain domain names. Consequently, the device enforcing the access-control list must separately [[Name resolution (computer systems)|resolve names]] to numeric addresses. This presents an additional [[attack surface]] for an attacker who is seeking to compromise security of the system which the access-control list is protecting. Both individual [[server (computing)|servers]] and [[router (computing)|routers]] can have network ACLs. Access-control lists can generally be configured to control both inbound and outbound traffic, and in this context they are similar to [[firewall (networking)|firewalls]]. Like firewalls, ACLs could be subject to security regulations and standards such as [[PCI&nbsp;DSS]].