IMHO there is no global setting, you can just specify it per extension, with max of 15/extension.
I've you to block only a few CID, you possible can direct edit it in the database for each extension.
But this will not be supported by 3CX, but possible will be a reasonable fix for you.