access-list 100 permit tcp host 192.168.0.2 host 172.16.0.2 eq www
access-list 100 deny tcp any host 172.16.0.2 eq www
access-list 100 permit ip any any
ip access-group 100 out
copy running-config startup-config