Allow dialing ring group only and not extension

We have an group of 4 extensions we would like in a “memory hunt” ring group. We do not want internal callers to be able to dial directly to the extensions and bypass the ring group. We do need external calls to directly dial these extensions. Can this be accomplished?