Allow select countries instead of blocking the world...

[gcjh01]

I understand the concept of allowing select countries (for us it's US/Canada) instead of blocking the world. I found an example of how to create this rule (https://forum.pfsense.org/index.php?topic=102071.0). What I don't understand is how to create a rule to block the rest of the world. I know by default WAN blocks everything inbound except I have +/- 100 rules that open specific ports to streaming servers. Aren't these ports open to the world?