Limit extension access from transferred calls?

General Help
1

How can I allow extension to extension dialing, but limit transfers of externally originated calls to other particular extensions?