Well I added "wherever" as a catchall - public is pretty much public. And there's a chain issue - if you ban country A, but not country B, and A is allowed to c

Well I added "wherever" as a catchall - public is pretty much public. And there's a chain issue - if you ban country A, but not country B, and A is allowed to connect to B, then A can still find a path through to you - it's all just one network with a near infinite number of paths.