IP Blocking

To block an internal IP address from getting out:

conf t
ip route ?.?.?.? 255.255.255.255 null0
(where ?.?.?.?. is the originating IP)

This can be handy for remote sysadmins if a machine has somehow been compromised.