PLANET XGS3-24042 - Manual (Page 514)

51-23
 If an access-list contains same filtering information but conflicting action rules, binding to the port will fail
with an error message. For instance, configuring “permit tcp any any-destination” and “deny tcp any
any-destination” at the same time is not permitted.
 Viruses such as “worm.blaster” can be blocked by configuring ACL to block specific ICMP packets or
specific TCP or UDP port packet.