Hi Raghavendra,
I suppose you will apply the access-list on an interface?
If that's the case you probably don't need to specify that the incoming traffic to host is allowed from anywhere. Unless you want to drop all incoming traffic that is coming from anywhere to something else that this hose in which case you'll need this input ACL:
access-list 100 permit ip any host 10.170.79.120
Applying the above access-list on input of the output interface will drop all packets except the ones to 10.170.79.120
For the outgoing traffic you'll need the following access-list:
access-list 101 permit ip host 10.170.79.120 host 10.170.76.107
access-list 101 permit ip host 10.170.79.120 host 10.170.76.102
access-list 101 permit ip host 10.170.79.120 host 10.64.35.79
You can apply it on input of the inside(s) interface(s) or on output of outside(s) interface(s) (which not the best choice as packets will cross the router and take some ressources before being dropped anyway).
