::

  acl <string> { <address_match_element>; ... };