ip access-list extended GKX-1
deny ip any any <<<<<<<<<<<<<<<<<<<<<<<<<
remark 10 deny traffic between internal networks form being NATed
deny ip 172.16.0.0 0.0.15.255 10.0.0.0 0.255.255.255
remark 20 deny traffic between internal networks form being NATed
deny ip 172.16.0.0 0.0.255.255 172.16.0.0 0.0.255.255
remark 30 deny traffic between internal networks form being NATed
deny ip 172.16.0.0 0.0.15.255 192.168.0.0 0.0.255.255
remark 40 deny CORP VPN user to any form being NATed
deny ip 172.16.3.0 0.0.0.255 any
remark 50 deny All CNCorp_Hosts to WindowsAD by policy route
deny ip 172.16.0.0 0.0.15.255 172.20.0.0 0.0.15.255
remark 60 deny All CNCorp_Hosts to WindowsAD2 by policy route
deny ip 172.16.0.0 0.0.15.255 172.20.16.0 0.0.15.255
remark 70 deny traffic between DMZ networks form being NATed
deny ip 172.16.0.0 0.0.15.255 172.16.16.0 0.0.0.255
remark 80 deny Corpgitlab to any form being Policy NATed
deny ip host 172.16.0.191 any
deny ip host 172.16.0.31 any
remark 100 deny Mailer to any form being Policy NATed
deny ip host 172.16.0.55 any
remark 10000 permit All CNCorp_Hosts to any
permit ip 172.16.0.0 0.0.15.255 any
remark 10001 permit All CNCorpGuest_Hosts to any
permit ip 172.16.18.0 0.0.0.255 any
remark 90 deny Redmine to any form being Policy NATed
deny ip host 172.16.0.47 any