https://ipnet.xyz/2009/03/cisco-how-to-selective-drop-packets-without-using-an-access-list/