firewalla felan gerek yok, htaccess ile kolayca yaparsınız,
aşağıdaki örnek çin için yapıldı, diğer ülkeleri de
http://www.countryipblocks.net/ adresinden htaccess deny seçip kod oluşturarak engelleyebilirsiniz.
Alıntı
<Limit GET HEAD POST>
order allow,deny
# Country: CHINA
# ISO Code: CN
# Total Networks: 1,761
# Total Subnets: 246,845,952
deny from 27.8.0.0/13
deny from 27.16.0.0/12
deny from 27.36.0.0/14
deny from 27.40.0.0/13
deny from 27.50.128.0/17
deny from 27.54.192.0/18
deny from 27.128.0.0/15
deny from 27.144.0.0/16
deny from 27.148.0.0/14
deny from 27.152.0.0/13
deny from 27.184.0.0/13
deny from 27.192.0.0/11
deny from 122.4.0.0/14
deny from 122.8.0.0/16
allow from all
</Limit>