If a packet enters or exits an interface with an ACL applied, the packet is compared against the criteria of the ACL.
Many are free kind of use, but require payment for business use. Be alert, be smart and you shouldn't be a casualty.