Block Incoming/Outgoing Non USA traffic

[t84a]

Is this something that can be done? I want to initially want to do it for my NVR on one of my 3 subnets. Will this create problems? If all is good, how do I accomplish this?

[wirehire]

you can out a us alias and and a allow rule only for this as source or destiny. or negatate the alias on all rules.