It's really hard to do shaping like that. Best solution would be to divide IPs, e.g. have a rule that matches on ALL .ro IPs. This gives you two groups: ro and not ro. But I have no idea if this can actually be done. Maybe ask your ISP which rules he uses to determine wether you're currently communicatin in .ro or not?
As for sharing bandwidth fairly for multiple users in the LAN in general, without that special .ro/.com stuff, you could have a look at my own script here:
http://www.metamorpher.de/ipshape/
It works quite well with 5 Users. Maybe fair sharing in general is already sufficient? - you should try simple solutions first before doing the overcomplicated stuff.