RE: Block calling certain numbers from certain extensions
Just do the opposite.
Allow an extension or for a group of them to call certain numbers only, by creating an Outbound Route specifically for them. Achieve that by specifying their numbers, in the Extension field under the Options of the Outbound Route.