Although this probably is a misinterpretation of your intents (I surely hope it is), but using 4xx range looks like you're actually advocating censorship. You're telling user agents that it's their error to make the request. ISP blocking access sets up a proxy that refuses to serve the request, it fails at their end, therefore code should be in 5xx range.