if (client.geo.country_code ~ "(US|PR|AS|GU|VI)") {
  set req.http.X-Country-Code = re.group.1;
  log req.http.X-Country-Code;
  error 403 "Restricted Content";
  }

#Here we check for a country code and if it's present, deny access with a 403.