As mentioned in T120564#1857702, it should be possible to locally whitelist subsets of globally blocked IP ranges.
See also:
- T42439: Allow global allowlisting for global blocks (to globally whitelist IP from global blocks)
- T5340: Allowing whitelisting single IP addresses within a blocked IP range (to locally whitelist IP from local blocks)