I need to figure out how I can do this at the high firewall level, but without having to manually enter thousands of IP ranges by hand