Who rated this post

@Fagani,

Only specify your own country in any exposed security rulebase rules that you have, or alternatively only allow access to external resources within your own country if you wish to block access to things hosted externally as well. 

You could do this for every entry that you create in your rulebase, or you could alternatively make a "blocklist" sort of entry at the very top of your rulebase. Set everything from untrust or whatever you call your external security zone, and then simply negate your country from the rule. This will drop everything cleanly under one rule entry.