Instead of both, you can add the IPs or IP ranges you want to allow to ipfilter_static.dat with a level of 255 to ensure it won't ever get filtered.
Assume you want to always allow the IP address a.b.c.d. Then you should put the following line in ipfilter_static.dat:
a.b.c.d - a.b.c.d , 255 , Some description for yourself