Blocking external calls on groups of extensions

[comtech]

You cannot block internal extension to extension without a little extra work.

Have a look at these:

Restrict internal extension calls

Stop internal to internal calls