We have used the "toll_allow" condition to the Outbound dialplan to accomplish this.
By adding a toll_allow condition to your dialplan, and then having the corresponding "Toll Allow" reference on your extensions, you can prevent outbound calls from the PBX, but still allow...