Which location is recommended for extended or extended named ACLs?
an intermediate location to filter as much traffic as possible
a location as close to the destination traffic as possible
when using the established keyword, a location close to the destination point to ensure that return traffic is allowed
a location as close to the source traffic as possible