White List both IP and Some of the Services

Is there any way to white list different set of peers for example some set of IPs, some set of services (using label), some set of namespaces, etc.

Below are the things I have tried but it didn’t work as expected,

  • A Rule with multiple handler-instance pair. Each pair is white listing individual set.
  • Multiple rules with same matching condition and having different handlers to white list individual sets.

Result: In both the case there is ANDing between the outcome of each handler.