Forum Moderators: phranque
The domain or IP address in "Deny from" refers to the actual computer accessing your site, and not to the referring domain.
You may be looking for an HTTP_REFERER-based access control. This can be done, but it's only 75% effective (just to pick a round number). This is because the HTTP Referer is not a required header, and some users behind corporate or ISP caching proxies, or using 'internet security' software won't send a referer to your server. For example, all AOL and Earthlink customers connect through caching proxies, and you won't see a referrer for many of their requests.
On the other hand, you could use a service such as GeoIP to block access from any IP address assigned to that country. Since IP address assignments are made on an 'as-needed' basis, the relationship between "country" and IP address is very complex and ever-changing, so that's why it takes "a service" to keep up with it.
So no, it is not "just that easy"...
Jim