block access by country code via IP.

geoblock.sh

#!/usr/bin/bash

# Remove existing blocklist
rm /tmp/geoblocklist.txt

# Make space for new blocklist
touch /tmp/geoblocklist.txt

# China
curl -k https://www.ipdeny.com/ipblocks/data/countries/cn.zone > /tmp/geoblocklist.txt

# India
curl -k https://www.ipdeny.com/ipblocks/data/countries/in.zone >> /tmp/geoblocklist.txt

# Russia
curl -k https://www.ipdeny.com/ipblocks/data/countries/ru.zone >> /tmp/geoblocklist.txt

# For each entry in the blocklist, add a rule to iptables.
for i in $(cat /tmp/geoblocklist.txt);
do 
iptables -A OUTPUT -d "$i" -j DROP
done