We can only do it on a per IP basis, and the two IPs that are associated with the domain drupal.org has been added already.
So updates and such thing from their site should work, but OpenID, and other services, that use a different IP would still be blocked (unless a rule for those has been...