I don't want to block by country.
The rule states "Deny - countries - Traffic not to/from - list of countries
So that to me means that traffic to a country not on the list is denied and traffic from a country not on the list is denied.
This is much easier than having about 180 countries on a deny list, much easier to manage.