Counter measures could include secure ssh connections to proxies outside the country. That should be very reasonable, until they redirect the host on their DNS to their server ...