 Consequently, the device enforcing the access-control list must separately resolve names to numeric addresses.This presents an additional attack surface for an attacker who is seeking to compromise security of the system which the access-control list is protecting.Both individual servers as well as routers can have network ACLs.