Would blocking all US IP ranges be sufficient even though it is served over TOR. Seems like that would meet the same bullshit requirement the NSA is using when it retains all traffic from outside the country.