The problem I have with a whitlisting approach is, what if it's actually some legitimate and damn important call? When my father was in the hospital close to death I got informed by phone from an unknown number. You get these calls hopefully only a few times in your lifetime, but I definitely don't want to miss them.
What's your approach for these cases?