Hi,
permit tcp any gt 1023 A.B.C.3D/32 eq 80
This entry matches any TCP segment whose destination is A.B.C.3D, source port number is 1024 or more and the destination port number is 80. In other words, this entry matches all TCP traffic sent from a client to a webserver at A.B.C.3D.
permit tcp any eq 80 A.B.C.3D/32 gt 1023 TcpEstablished
This entry matches any TCP segment whose sender is A.B.C.3D, source port is 80, destination port is 1024 or more, and has any of these flags set: ACK, FIN, RST. In other words, this entry matches all return traffic from the webserver at A.B.C.3D sent to a client in a response to its request.
Best regards,
Peter
