ACL based forwarding