I am currently learning about Access Control Lists (ACL) and am having some difficulties with identifying if a rule poses a security risk or not. One of the rules states that any source IP using any source port can send its traffic to the destination IP 192.168.1.0/24 and destination port >1023. I think this rule is risky because the destination port is not part of the well-known ports, but I'm not sure if I'm correct.
I also think the any, any, any, any rule is risky because (if I understand this correctly) it permits all traffic from all sources to reach all destinations that were not part of the previous rules.