which Layer would you check ACLs for TCP ports being blocked?

At which Layer would you check ACLs for TCP ports being blocked?

A.
Layer 1

B.
Layer 2

C.
Layer 3

D.
Layer 4