Reflexive Access List
I just tried it out on a lab setup and this should illustrate it nicely for you.
R4 ======= R3========R1=====R5 s1/0
Allow R4 to ping R5 but not R1(or anything else) via R3
On R3
ip access-list extended EVALREFLECT evaluate ICMP deny […]