Well, for starters, the first statement whose conditions all are
satisfied determines the outcome of an acl. I this case the first
statement accepts if the host is in *. In other words this acl always
accepts!
You probably get a bit more what you want if you put the deny on top
followed by the accept (without any conditions).
