# conf t
(config)# access-list 103 permit tcp any eq 8443 host 172.16.2.60 eq 443
(config)# access-list 103 permit tcp any eq 8444 host 172.16.2.61 eq 443
(config)# access-list 103 deny ip any any
(config)# interface fastethernet 1 (choose outside interface of router)
(config)# ip access-group 103 in