[firehol_abusers_30d]: Zscaler address block in list, should be removed

[ashish-logmaster]

Hi folks,
165.225.56.64
165.225.56.78
165.225.56.118

Are in the lists.
The netblock 165.225.56.0 - 165.225.56.255 is owned by Zscaler which is a proxying service used by Fortune 500 companies.
I don't think you should have the above addresss in the abuse list.

[ Filing this issue as Datadog reported 165.225.56.219 in our log traffic as an abuser w.r.t to this list. They themselves have a bug of using a CIDR block for alerting vs actual info in your list.]

Thanks,

[betterthan70]

Zscaler IPs are still added in the list - how can we remove them permanently?
E.g. a lot of addresses from 165.225.206.0/23 range.

[lpriit]

Same issue with Zscaler 165.225.20.0/23, that it's reported as public proxy.

[william-scholes]

Could we get this Zscaler list parsed from Json to the normal type of list in Firehol? then we can easily choose to allow or block Zscaler if we use it?
https://config.zscaler.com/api/zscloud.net/future/json
my FW doesn't natively support JSON lists so while I could parse this myself, would be useful for Firehol to include it imo