A network administrator needs to prevent hosts on the 192.168.10.0/24 subnet from reaching the server 172.16.5.10, while allowing all other traffic. The administrator decides to use a standard access control list. On which router interface and in which direction should the standard ACL be applied for best practice?