Dial-on-demand routing (DDR) can use an access list to determine interesting traffic. Interesting traffic is defined with a permit and uninteresting traffic with a deny. The link doesn't even attempt to activate unless the traffic is permitted. Once the link is up, interesting or uninteresting traffic may pass; it only controls keeping the link active and initiating it, not security.
