access-list 101 deny   ip 10.10.0.0 0.0.255.255 10.10.0.0 0.0.255.255
access-list 101 permit ip 10.10.7.0 0.0.0.255 any
access-list 101 permit ip 10.10.8.0 0.0.0.255 any
access-list 101 permit ip 10.10.9.0 0.0.0.255 any

ip access-list standard INSIDE_NAT_ADDRESSES
 permit 10.10.7.0 0.0.0.255
 permit 10.10.8.0 0.0.0.255
 permit 10.10.9.0 0.0.0.255
!