put "deny from all" then add ip-ranges from these
two files. just cut and paste. yes, is a *lot* of data;
but that's how you do it
https (ok colon and dbl fwd slash) www (a dot) countryipblocks.net/e_country_data/US_allow (this is the dot) txt
https (ok colon and dbl fwd slash) www (a dot) countryipblocks.net/e_country_data/CA_allow (this is the dot) txt