An ACL is no replacement for a real firewall. At a router level, I would only ever drop packets based on simple IP inspection. Bogons, RFC1918, unwanted/bogus/unneeded route advertisements, etc.

Akamai's Prolexic network cloud firewall now offers the ability to customize access control lists and deploy them at network edges. Content delivery network (CDN) and cloud security services provider ...