access-class out to prevent telnet

Has anyone here had success with preventing outbound telnet from a router
using access-class out?
According to this doc you should use a standard ACL and what would normally
be considered the
source would actually be the destination:

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_cntrl_acc_vtl.html

I tried this and no dice. I tried using an extended ACL:

access-list 101 deny ip any any

and no dice.

No matter what I try... I can't seem to prevent outbound telnet from a
router using
access-class out.

Thanks,
Bryan R.

Blogs and organic groups at http://www.ccie.net
Received on Sat Apr 18 2009 - 23:41:37 ART