The easiest way is you can create several separate outbound POTS dial-peers, one pointing to the PRI (with the default preference 0), the other one with preference 1, 2, 3 etc.. pointing to the FXO ports.
To block incoming call, you can do something like this:
voice translation-rule 100
rule 1 reject /^.*/
!
voice translation-profile BlockCalls
translate called 100
!
dial-peer voice 1000 pots
description *** incoming calls ***
call-block translation-profile incoming BlockCalls
!