Diff of Aliases

[disi1]

I love the Aliases and the possibility to add URLs to lists on the internet, maintained by institutions to make the internet more secure.

Let's say I have these online lists:
A = 1.1.1.1,2,2,2,2
B = 3.3.3.3, 1.1.1.1
C = 5.5.5.5, 4.4.4.4
I know about adding and already combine aliases of URLs and expect it to look like this:
A+B+C = D = 1.1.1.1, 2.2.2.2, 3.3.3.3, 4.4.4.4, 5.5.5.5

Now I want to make a list of IPs to exclude from a list:
E = -3.3.3.3, -1.1.1.1
D + E = 2.2.2.2, 4.4.4.4, 5.5.5.5

Without any pfBlockerNG etc. pure pfSense?

I see the option to add an "Allow" rule before the "Block" rule on the firewall? But it is not "pretty"?

I also think about setting up some docker web server locally or can pfSense can access it's own file system? That could generates a personal list for pfSense to pull. But this would be a last resort if this is not already possible?