R1(config)# ip access-list extended outgoing_traffic_gi0/0 R1(config-ext-nacl)# deny ip 192.168.1.0 0.0.0.255 any log R1(config-ext-nacl)# 1000 permit ip any any