Resolved! Inbound direction on Pix interfaces
Access-group statements always apply an ACL to an interface with the command "in interface <interface name>. The Pix docs say that "this filters inbound packets at the given interface". I would like a clear definition of what is inbound. My understad...