you can ban traffic from .cn domains with htaccess simply like armedandhammered said, but i think to ban chinese surfers (chinese ip's) you will probably need geoip module installed on your server to ban them using htaccess (unless there's another way?). go to
maxmind to learn more