You could probably do that by configuring the Calling Search Space for Forwarded numbers to something that will not include routes that go to external numbers. If you want to restrict to internal numbers only, have all the DN's in an Internal partition, then have a CSS for CallFwd that only includes the internal partition. No partitions with routes out...