I wonder if you could somehow use Call Recognition Service to do this? Program the unwanted number(s) as EHDU users, put them in their own interconnect with no access to anything else. Unwanted caller dials in, gets dialtone immediately, then can't dial anything at all.