This is a simple protection from accessing Internet of at-risk countries.
Monitor, block, and cache DNS requests locally. Use wildcard based rules.