You have forgotten that the default condition of an access list is deny.
By not explicitly allowing any addresses through your access list you are denying everything.
There are worlds out there where the sky is burning, where the sea's asleep and the rivers dream, people made of smoke and cities made of song. Somewhere there's danger, somewhere there's injustice and somewhere else the tea is getting cold" Dr Who
