For incoming traffic, if you put the server under Access Control and configure white/black list on the profile, incoming traffic will be blocked/allowed accordingly. You can put single IP addresses like 123.45.67.8, or IP address range in CIDR format: 123.45.67.0/24. However, there’s no add-on to let you block by country.