Some threat intelligence lists have false positives. Slips should filter the easy ones.

[eldraco]

Describe the bug
Some TI feeds still have FP. Slips can not stop that, but it can filter the easy ones, like IP 255.255.255.255 and 0.0.0.0

This was found in a private capture

`2024-12-01T18:31:58.128457+00:00 (TW 2): Src IP 255.255.255.255 . Detected connection from blacklisted IP: 0.0.0.0 to 255.255.255.255. Description: 0.0.0.0/8. Source: firehol_level1.netset. threat level: low. IP 0.0.0.0 appears in blacklist: firehol_level1.netset.``

Expected behavior
Not to have this FP

Branch
Docker running slips_light
Develop 1.1.4

Environment (please complete the following information):

OS: macos m1
Version: m1
Python version Python 3.10.12
Are you running slips in docker or locally? yes in docker
Docker version (if running slips in docker) 4.36.0
Commit hash: ( git rev-parse --short HEAD ): not shown in the docker version

[AbhiramMasna]

Hey @eldraco is it okay if i contribute to this issue?

[AlyaGomaa]

hey sure you can. let us know if you need any help!